Patch release since v0.1.8.
Fixes
- PostHog reverse-proxy TLS verify and DNS re-resolution (#501)
- Docs-site Docker build: pin TypeScript 6, use webpack (#500)
- Native-arch all-in-one image so tagged releases cannot hang on qemu arm64 (#514)
Security
- brace-expansion ReDoS override (#480)
- postcss path-traversal bump (#476)
- Remaining transitive CVE sweep in docs-site and mcp-mux (#483)
Dependencies
Dependabot minor/patch sweeps across backend, frontend, docs-site, CLI packages, and GitHub Actions (upload-artifact v7, download-artifact v8). TypeScript 7, oauth2-mock-server v9, and TanStack Table v9 stay pinned; they break the SDK introspector, Jest, and getCoreRowModel.
Other
- README hero screenshot (#471)
Images: almyty/api:0.1.9, almyty/frontend:0.1.9, almyty/docs:0.1.9, almyty/almyty:0.1.9 (all-in-one publishes natively per arch, off the prod-deploy path).
Full Changelog: v0.1.8...v0.1.9