v4.16.1

TanStack/queryv4.16.1Jul 17, 2026by github-actions[bot]

AI Summary

This release focuses on security and login flow improvements. It fixes a potential disk access vulnerability in actions, resolves password complexity display issues, and stabilizes the login process to prevent crashes and manage button states during password setting.

Key Highlights

Security patch preventing disk access via 'require' in actions.
Improved password complexity error messages showing minimum length.
Login flow stability improvements to handle stale session cookies.
Fixed state management for the submit button during password setup.

Full Release Notes

## [4.16.1](https://github.com/zitadel/zitadel/compare/v4.16.0...v4.16.1) (2026-07-17)


### Bug Fixes

* **actions:** prevent disk access via require ([afe1086](https://github.com/zitadel/zitadel/commit/afe108640cf57a17e8b743fbcdad9ae636eb3eb7))
* **console:** display minimum length in password complexity message ([#12419](https://github.com/zitadel/zitadel/issues/12419)) ([cc3812a](https://github.com/zitadel/zitadel/commit/cc3812a940d629984802fd1246f84fd91d07f6e8)), closes [#12390](https://github.com/zitadel/zitadel/issues/12390)
* **login:** keep submit button disabled/loading during password set r… ([#12429](https://github.com/zitadel/zitadel/issues/12429)) ([0a355f7](https://github.com/zitadel/zitadel/commit/0a355f77db2f6dafc4e2d1b3254775d3a2c4a627)), closes [#12416](https://github.com/zitadel/zitadel/issues/12416)
* **login:** prevent crash on a stale session cookie ([#12423](https://github.com/zitadel/zitadel/issues/12423)) ([6030a43](https://github.com/zitadel/zitadel/commit/6030a4316aceff23f9730bf8ccd3d1fa2411b293)), closes [#11130](https://github.com/zitadel/zitadel/issues/11130)