v4.33.9

4.33.9 (2026-10-21)

Bug Fixes

• cli: bump Go toolchain floor to 1.26.10 (#5136) (0d8317a)
• cli: default omitted config block to TOML (#5106) (0c43678)
• cli: derive the cursor request param when cursor_param is omitted (#5134) (6906126)
• cli: keep resolvable dogfood skips out of hollow publish failures (#5132) (9690e9d)
• cli: opt in to host-only subdomain cookies in press-auth (#5105) (20e39ca)
• cli: rank incremental sync date filters (#5107) (e4d719e)
• cli: reduce novel-host false positives for file paths and version strings (#5051) (228b82e)
• cli: register auth set-token for oauth2 authorization code (#5135) (5a59a79)
• cli: run verify probes inside the mock environment (#5102) (10c6496)
• cli: skip unbound search paths and honor bracketed query params (#5133) (6aaa642)
• cli: stop dogfood treating quote gaps as config fields (#5108) (46d42b5), closes #4626
• cli: trust a private CA and name the TLS server (#5112) (f3448af)