browse: v0.16.4

0.16.4 (2026-06-12)

Bug Fixes

• authenticate recorder events (ba12dc6)
• bound socket request buffers (5caadca)
• constrain crawl link traversal (fecb237)
• constrain flow screenshot filenames (eb964b3)
• gate login credentials behind config trust (a06b2c9)
• harden config plugin loading (6134ced)
• move daemon files to private runtime dir (e391413)
• protect auth state exports (5125807)
• reject dangerous playwright launch options (22d42f3)
• reject unsafe regex patterns (ca53302)
• restrict tcp daemon binding (e7fa470)
• sanitize doc capture filenames (17b0d11)
• write pid files without following symlinks (b1ce29f)