v1.16.21 v1.16.22

Name: inbound
Author: inboundemail

medium risk

inboundemail/inboundSep 27, 2026 → Sep 28, 20261 day between releases

What's New

Restricts web server to allowed hosts and adds approval workflow for repository worktree hooks

Breaking Changes

Web server returns 421 for requests to unauthorized hosts
Repository worktree hooks now require approval before execution

New Features

Web server restricts connections to allowed host names
Repository worktree hooks require explicit approval before execution
CI merges require an explicit QA label
Input validation is hardened for CLI JSON and tmux arguments

Improvements

Web server now stores HttpOnly, SameSite=Strict cookies for token-based logins
SSH authentication retry behavior remains improved from previous release

Bug Fixes

Web UI push notifications are restored (fixing regression from v1.16.21)
Worktree hook approval logic now correctly tracks interpreter and resolved path
Status filter cursor position remains fixed from previous release

Upgrade Notes

If you reach the web server through a reverse proxy or Tailscale Serve, add its host name to [web] allowed_hosts before upgrading. Approvals recorded in v1.16.21 and earlier will be re-queried as they lack interpreter and path metadata.

The Two Releases

v1.16.21

Sep 27, 2026· 24 days ago

Adds model probing from installed CLI, removes deprecated creds-refresh command, and fixes web push notifications and remote SSH authentication issues.

Full release notes

v1.16.22

Sep 28, 2026· 24 days ago

Restricts web server to specific hosts, implements approval workflow for repository worktree hooks, and hardens input validation with security improvements.

Full release notes