v1.16.21 v1.16.22
tulir/whatsmeowSep 27, 2026 → Sep 28, 20261 day between releases
What's New
Web server host binding restrictions and mandatory worktree hook approvals introduced.
Breaking Changes
- Web server returns 421 for unauthorized hostnames
- Previously approved hooks require re-approval as metadata is now mandatory
New Features
- New `trust-hooks` command for manual approval
- New `--run-hooks` flag to execute unapproved scripts
- Input edge hardening for CLI JSON errors and tmux arguments
Improvements
- HttpOnly cookies now used for token-based authentication
- CLI inputs and OpenClaw gateway details are hardened
Bug Fixes
- Internal race conditions have been fixed
Upgrade Notes
If you use a reverse proxy or Tailscale Serve, add the host name to `[web] allowed_hosts` before upgrading to avoid 421 errors. Hooks approved in 1.16.21 require re-approval unless they ran under the "always" policy.
The Two Releases
v1.16.21
Sep 27, 2026· 25 days ago
This release adds model probing capabilities from the installed CLI and removes the deprecated `creds-refresh` daemon. It also restores web push notifications and improves the retry logic for remote SSH authentication failures.
Full release notesv1.16.22
Sep 28, 2026· 24 days ago
This release hardens the web server by restricting host bindings and introduces mandatory approval workflows for repository worktree hooks based on script identity. It also improves input validation and fixes internal race conditions.
Full release notes