v1.16.21 v1.16.22
Infisical/agent-vaultSep 27, 2026 → Sep 28, 20261 day between releases
What's New
Web server security tightened and worktree hooks now require explicit approval.
Breaking Changes
- Web server access restricted to specific hostnames; requires config update for reverse proxies or Tailscale Serve.
- Worktree hooks now require explicit approval based on script identity (SHA256, path, mode).
New Features
- HttpOnly, SameSite=Strict cookies for web UI token reloads.
- New `trust-hooks` CLI command for manual worktree script approval.
- Hardened input validation for CLI JSON, tmux arguments, and conductor names.
Improvements
- Enhanced web server security with host restriction and HttpOnly cookies.
- Vitest dependency bumped to 4.1.11.
Upgrade Notes
If using a reverse proxy or Tailscale Serve, add the hostname to `[web] allowed_hosts` or pass `--allowed-host` to avoid 421 errors. Hooks approved in previous versions will be re-asked for approval as approval criteria now include resolved path and execution mode.
The Two Releases
v1.16.21
Sep 27, 2026· 24 days ago
Removed the deprecated `creds-refresh` daemon to comply with vendor terms and restored push notifications for the web UI. Improved remote connection handling to automatically retry failed SSH authentications.
Full release notesv1.16.22
Sep 28, 2026· 24 days ago
Enhanced web server security by restricting access to specific hostnames and improving cookie handling. Implemented strict approval workflows for repository worktree hooks to ensure script integrity.
Full release notes