v0.17.0

0.17.0 (2026-05-06)

Refactors

• replace parseArgs 31-value tuple with Args struct — all flag values now accessed as a.FieldName; callers updated throughout (6843844)

Bug Fixes

• remove stale proxy entries from settings.json on startup — probes existing 127.0.0.1:<port> entries with a 200ms TCP dial and removes dead ones before writing the new URL (8a1856b)
• pkg/proxy.NewServer and pkg/headless.Ensure now return errors instead of calling log.Fatalf; authcheck resolves CLI binary via fallback dirs (fixes silent false-negative on GUI-launched sessions) (eeaa65e)
• add missing sanitize patterns: case-insensitive Bearer, Basic auth, access_token JSON field, DATABRICKS_TOKEN env-var; --idle-timeout now rejects bare integers with a clear error (ec2e95b)
• use os.CreateTemp for unique tmp filenames in settings writers — eliminates concurrent-write corruption when two processes start simultaneously (a2d97a0)
• broaden sanitize patterns to cover dapi tokens without hyphen and X-Databricks-Authorization header (7cccfd8)
• skip Authorization header injection when token is empty; fix WebSocket goroutine leak (single <-done replaced with explicit conn close + second receive) (b3bf297)
• properly wrap lifecycle handler on health-watcher takeover so /shutdown triggers clean shutdown after promotion (17fb740)

Improvements

• replace hand-rolled slice-bounds prefix checks with strings.HasPrefix; add https:// variant for localhost suppression; fix orphan comment in pkg/refcount (219a29b)
• align README with current CLI flags and --print-env output (46a4d9b)