v1.16.30 v1.841.0
medium risk
asheshgoplani/agent-deckOct 18, 2026 → Oct 18, 20260 days between releases
What's New
Agent Deck adds cost budget enforcement; Windmill adds workload identity auth
Breaking Changes
- Project MCP configs that are symlinks to files outside the project are now refused
- Watchers created without `-p` while another profile was selected are now stored in `default`
- Scripts running `config set macapp.plugins true` without a terminal must add `--yes`
- Goal files with `max_cycles: 0` now run with no cycle cap instead of failing
New Features
- Agent Deck: Cost budget enforcement with `[costs.budgets] enforce = true`
- Agent Deck: New Triggers view showing session wakeups and health
- Agent Deck: Web terminal supports Cmd-click to open links
- Windmill: Workload identity token authentication for agents
- Windmill: Private MCP server URL naming via `ALLOW_PRIVATE_MCP_SERVER_URLS`
Improvements
- Agent Deck: Terminal escape sequences are cleaned for security
- Agent Deck: Watchers provide live updates without restart
- Windmill: SQL integer arguments are validated for range instead of wrapping
- Windmill: Autoscaled worker groups now warn if they have no tags
Bug Fixes
- Windmill: ApiAuthed is inserted into request extensions in no-auth mode
- Windmill: Out-of-range integer args to narrow SQL types are rejected
Upgrade Notes
These are releases from different repositories (Agent Deck vs Windmill), so they are not direct upgrades for each other. If upgrading Agent Deck, review symlink handling and config flags. If upgrading Windmill, no specific migration is required.
The Two Releases
v1.16.30
v1.16.30
Oct 18, 2026· 3 days ago
Agent Deck v1.16.30 is a security-focused update that introduces cost budget enforcement, new triggers and watchers functionality, and enhances the macOS app and web terminal capabilities. The release includes significant security improvements around MCP config handling and terminal escape sequences.
Full release notes