v0.16.1
Highlights
Fix sandbox CLI ignoring allow_foreign_credentials for masked secrets — The sandbox CLI's masked secret parser did not read the allow_foreign_credentials field from config, so MaskedSecret always defaulted to false. This caused the proxy to strip legitimate credentials (e.g., server-issued JWTs during Cloudflare Pages deploys) even when allow_foreign_credentials: true was explicitly set. The CLI parser now reads the field, matching the gateway config parser. (#274)