v0.3.9 v1.7.3
HKUDS/Vibe-TradingSep 5, 2026 → Sep 6, 20261 day between releases
What's New
Major version jump adds Cloudflare provider and restores 1.6 account schema after 1.7 disruption.
Breaking Changes
- Requires cleanup of 1.7 issuer schema if previously applied.
- Major version bump implies potential breaking API or config changes.
New Features
- Cloudflare social provider with client-secret and PKCE support.
- Initialization-time schema validation with actionable mismatch guidance.
- isPasswordCompromised for checking passwords against Have I Been Pwned.
- Codex as a supported target for documentation MCP server.
- Custom token endpoint authentication strategies for providers.
Improvements
- Enabled schema validation during initialization by default.
- Improved Auth0 domain normalization to avoid slow trailing-slash processing.
- Aligned generated OpenAPI required fields with runtime validation.
- Handled malformed custom-scheme callback URLs without excessive processing.
Bug Fixes
- Aligned generated OpenAPI required fields with runtime validation.
- Handled malformed custom-scheme callback URLs without excessive processing.
- Improved Auth0 domain normalization to avoid slow trailing-slash processing.
Upgrade Notes
If you applied the 1.7 issuer schema, follow the upgrade guide for the required cleanup. No backfill is needed. Restored 1.6 account core schema to avoid disruptive migrations.
The Two Releases
v0.3.9
Sep 5, 2026· 2 months ago
This release focuses on CI/CD improvements, repository transfer, TUI refactoring, and new security features including execution approval and OpenRouter configuration support.
Full release notesv1.7.3
Sep 6, 2026· 2 months ago
This patch release prioritizes stability by restoring the 1.6 account core schema to prevent disruptive migrations for existing users, while adding new providers like Cloudflare and introducing password breach checking capabilities.
Full release notes