v1.16.1

• The bundled shoutrrr (alerts) is built with Go 1.27.3, fixing CVE-2026-111943 (crypto/x509). 1.16.0 was tagged but never published: its image failed the vulnerability scan.

v1.15.1

• Removed: the terminal's Pop out button, until it works more smoothly.

v1.15.0

• Terminal: a Pop out button (Chrome and Edge on desktop) moves the terminal into a small always-on-top window. The session stays connected. Close the window to bring the terminal back.
• Fixed: someone who can edit their email at the identity provider could add spaces or brackets to fake fields in target hosts' sshd logs. Certificate key IDs now keep only letters, digits and _ . @ + - from the email.
• Alerts: task names, emails and other user-set text can no longer ping people (@everyone, mentions) or post clickable links.
• Alerts: errors now hide more of a channel's URL (hostname, and tokens in the path or query).
• Tasks: hosts still running when the app restarts are now logged as task_end in the audit log and trigger the failed-task alert.
• Tasks: a host's output no longer loses its last character when the output ends partway through a multi-byte character.
• Sign-in: when the identity provider can't be reached on the way back from sign-in, the "provider down" page is shown instead of an error.
• Sign-in: a malformed return address after sign-in now goes to the host list instead of an error. The favicon no longer resets a sign-in in progress.
• A failed database write no longer crashes the app (tasks, alerts, Fleet, audit log). A terminal whose start or end can't be audited is closed.
• Terminal: at most 190 ssh sessions in total (was 200), leaving room for the app's other ssh processes.
• Install script and README: ca_password is created readable by its owner only.