v0.74.3 v1.43.0
rajnandan1/kenerAug 17, 2026 → Aug 31, 202614 days between releases
What's New
Security hardening and Spanish localization added in v1.43.0
Breaking Changes
- Webhook and SSO requests are blocked if they resolve to loopback or private addresses unless explicitly allowed.
- Third-party applications cannot mutate account data via the Account API (returns 403).
New Features
- SSRF protection for webhooks and enterprise SSO.
- Token exchange validation requiring specific JWT claims.
- Spanish (Mexico) localization support.
- Microsoft Azure AD disableEmailSync option.
Improvements
- Security hardening for outbound requests via SSRF protection.
- Token exchange validation for improved security.
Bug Fixes
- Fixed list formatter placeholders.
- Fixed remaining untranslated MFA message in Spanish locales.
Upgrade Notes
Review outbound webhook and SSO configurations to ensure they are not blocked by new SSRF protections. Third-party applications using the Account API to mutate data will now fail with 403 errors and require endpoint updates.
The Two Releases
0.74.3
Aug 17, 2026· 2 months ago
This release focuses on performance optimizations for non-ASCII input and fixes several terminal compatibility issues, including bracketed paste mode and startup blocking on specific terminals like FreeBSD.
Full release notesv1.43.0
Aug 31, 2026· 2 months ago
This release focuses on security hardening, including SSRF protection and stricter token validation, while adding localization support for Spanish (Mexico) and fixing various bugs in authentication and account management.
Full release notes