Release v0.16.5

🎉 Release v0.16.5

📦 Docker Images

# Docker Hub
docker pull agigante80/actual-mcp-server:0.16.5

# GitHub Container Registry
docker pull ghcr.io/agigante80/actual-mcp-server:0.16.5

📝 Changelog

• chore(release): bump version to 0.16.5 (f515887)
• fix(adapter): downloadBudget can resolve with no budget open (#396) (1731b30)
• fix(review): the lock can now reject before fn(), and callers assumed it could not (#393) (fd2ba93)
• fix(security): make the abandoned-load wait structural, bounded and fail-closed (#393) (68a2dd8)
• fix(security): close the abandoned-load leak, the last #390 path (#390) (2c6d756)
• fix(security): close the remaining budget-isolation holes (#390) (6d61c75)
• fix(security): a session operated on whatever budget was loaded last (#390) (86d3e63)
• docs(test): case (9)'s label still claimed the property its assertion no longer tests (#378) (6c2c99e)

📊 What this release ships

• @actual-app/api pinned at 26.8.1
• All 74 MCP tools registered and validated on this tag

🔒 Security

This release has been scanned for vulnerabilities. Check the Security tab for details.

Full Changelog: v0.16.2...v0.16.5