v1.16.21 v1.16.22
NirDiamant/RAG_TechniquesSep 27, 2026 → Sep 28, 20261 day between releases
What's New
Web server restricts hostnames; configure allowed_hosts to prevent 421 errors.
Breaking Changes
- Web server now only answers requests to its own host names
- Host name configuration required for reverse proxy/Tailscale Serve
- Re-approval of repository worktree hooks
New Features
- Host name configuration for reverse proxy/Tailscale Serve
- Web server host name restrictions
- HttpOnly cookie implementation
- Vitest 4.1.11 update
Improvements
- Input edges hardened to prevent potential issues
Bug Fixes
- Input edges hardened to prevent potential issues
Upgrade Notes
If using a reverse proxy or Tailscale Serve, add the host name to `[web] allowed_hosts` before upgrading to avoid 421 errors. Approvals from versions 1.16.21 and earlier are invalid for worktree hooks due to missing interpreter/path data, requiring re-approval on next run.
The Two Releases
v1.16.21
Sep 27, 2026· 25 days ago
This release adds model and reasoning-effort lists from the installed CLI, with Codex models leading the pickers. The creds-refresh command and its daemon are removed due to Anthropic's terms. Several fixes include status filter shortcuts, web push notification support, remote SSH authentication retry logic, and CI/lint tooling updates.
Full release notesv1.16.22
Sep 28, 2026· 24 days ago
This release requires adding host names to allowed_hosts before upgrading to avoid 421 errors. Approvals from earlier versions didn't include interpreter or resolved path, so hooks approved before will be asked again. The web server now only answers requests to its own host names, requiring configuration for additional names. Repository worktree hooks now require approval bound to the whole script identity. Web test tooling updated to vitest 4.1.11. Several input edges were hardened to prevent potential issues.
Full release notes