Summary
The release restores compatibility with 1.6 account schemas and enables initialisation-time schema validation by default, rejecting authentication requests when detected mismatches remain. It also adds Cloudflare as a social provider, Have I Been Pwned password checks and fixes for OAuth callbacks, session handling and TOTP re-enrolment.
Why it matters
Schema drift and authentication edge cases can become production outages or security defects; moving validation earlier makes deployment failures more visible before they affect users.
Related coverage
- LiteLLM 1.100.0 expands gateway integrations and security controls
- Qwen Code preview adds inspectable multi-agent workflows
- Vercel AI SDK adds GPT-6 reasoning configuration