mineru-4.0.8-released v1.16.22

Name: cybos
Author: Gerstep

high risk

Gerstep/cybosSep 27, 2026 → Sep 28, 20261 day between releases

What's New

v1.16.22 adds security features for web UI and hooks, while mineru-4.0.8 enhanced PDF performance.

Breaking Changes

Host validation requires adding reverse proxy names to `[web] allowed_hosts` or passing `--allowed-host` to avoid 421 errors
Approval records from 1.16.21 and earlier are invalidated, requiring re-approval for worktree hooks

New Features

Host validation for reverse proxy and Tailscale access to the web UI
Secure approval system for repository worktree hooks based on SHA256 and execution context
HttpOnly and SameSite=Strict cookie support for web UI authentication

Upgrade Notes

You must add reverse proxy host names to `[web] allowed_hosts` to prevent 421 errors, and previous worktree hook approvals are invalidated, requiring re-approval unless the hook runs under "always".

The Two Releases

mineru-4.0.8-released

MinerU 4.0.8

Sep 27, 2026· 24 days ago

Enhances PDF processing performance by reusing document render sessions and upgrading the docvortex dependency to 0.5.2.

Full release notes

v1.16.22

Sep 28, 2026· 24 days ago

Adds host validation for reverse proxy and Tailscale access to the web UI and introduces a new approval system for repository worktree hooks to improve security.

Full release notes