## invoke-ai/InvokeAI — v6.14.1…v6.14.2

_17 commits._

### Features
- **feat(krea2): training-free style reference (#9512)** (ef2c19d)
- **Feat(text tool): Add import custom fonts (#9091)** (ef832d1)

### Fixes
- **fix(auth): keep a password-change token when a routine refresh lands first (#9599)** (e927a2e)
- **fix(api): reject path traversal in object-serializer names and model keys (#9595)** (fac15fe)
- **fix(ssrf): clarify proxy destination policy without blocking local proxies (#9554)** (f19bb9d)
- **fix(auth): accept epoch-changing token refreshes (#9560)** (adb0623)
- **fix: remove FP4 Mistral starter, fix model rename validation, limit Z-Image to Qwen3 4B encoders (#9587)** (910aec8)
- **fix(mm): stop the SDNQ guards from aborting folder-encoder identification (#9561)** (5270983)
- **fix(flux2): img2img posterization - noise scaling and sigma schedule (#9556)** (02709b2)
- **fix(ui): make I hotkey work in Canvas, Gallery, and Viewer (#9569)** (9e15409)
- **fix(qwen): make room in VRAM for the quantized Qwen2.5-VL encoder and release it afterwards (#9147) (#9572)** (685cb03)
- **perf(video): buffer upload metadata in a bounded bytearray, not a list[bytes] (#9583)** (25846c4)
- **fix(model loaders): ignore unexpected checkpoint keys, report them at debug only (#9581)** (6515d90)
- **fix(gguf): honor ComfyUI's comfy.gguf.orig_shape metadata (#9564)** (395ab9e)

### Backend
- **v6.14.1 prep (#9571)** (61b9eba)

### Docs
- **docs(ui): pin the scope of the socket's server-disconnect retry bound (#9542) (#9582)** (b42077d)

### Chore
- **chore(release): bump version to 6.14.2** (11b6ee6)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/invoke-ai/InvokeAI?utm_source=github-action)._