Skip to content

v1.16.1

Choose a tag to compare

@github-actions github-actions released this 24 Jun 03:40

Patch release — widget anti-spam fix.

Fixes

  • Reply-form honeypot is hidden again. The offscreen-hiding CSS was scoped to the top-level form only, so the reply form's hidden website honeypot rendered as a visible empty input below the reply box. Besides being a stray field, it exposed the anti-spam trap to bots (they could see which field to leave blank). The rule now applies to every form.

Upgrade notes

  • No env var, config, or migration changes.
  • Redeploy the Worker (npm run deploy) to ship the rebuilt embed.js; the fix is in the embed bundle, so embeds pick it up on next load once deployed.

Full Changelog: v1.16.0...v1.16.1