v3.8.6 v1.16.0
Gentleman-Programming/engramMay 25, 2026 → May 28, 20263 days between releases
What's New
Major security hardening and CLI enhancements added in v1.16.0.
New Features
- Opt-in HTTP auth for destructive endpoints via ENGRAM_HTTP_TOKEN.
- CLI `engram delete` now supports sub-commands.
- TUI clipboard shortcut added.
- Cross-project search capability enabled.
- Pi setup hardening implemented.
Improvements
- Constant-time token comparisons to prevent timing attacks.
- Obsidian exporter path traversal sanitization.
- Comprehensive documentation refresh.
Bug Fixes
- Obsidian exporter path traversal vulnerability.
Upgrade Notes
HTTP auth is opt-in via ENGRAM_HTTP_TOKEN for destructive endpoints, preserving zero-config by default. The CLI delete command now supports sub-commands like delete observation <id>, though the legacy format remains functional.
The Two Releases
v3.8.6
May 25, 2026· 5 months ago
A routine maintenance release for whisperX that adds Indonesian language support to the alignment model list and fixes handling of the 'ignore' interpolation method in `interpolate_nans`. It also bumps the nltk dependency and hardens CI workflows with a new zizmor workflow.
Full release notesv1.16.0
May 28, 2026· 5 months ago
A major release focusing on security hardening (HTTP auth, constant-time comparisons), CLI enhancements (delete sub-commands), TUI improvements (clipboard copy), search capabilities (cross-project, case-insensitive), and cloud/Pi configuration updates.
Full release notes