Pad v0.17.1

Security release

Upgrade recommended for all installations.

• Workspace search no longer returns items the caller can't see. In some cases, workspace-scoped search and MCP search returned items from a workspace the caller wasn't a member of and had no grants in. A user-less legacy workspace token's unscoped search could also reach every workspace on the server. Search now resolves the caller's visibility and fails closed at both the handler and the query layer.

No other changes from v0.17.0. Upgrade notes for v0.17.0 still apply.

---

Changelog

Bug fixes

• 0dae276: fix(search): scope workspace search to visible items (#1723) (@xarmian)