v1.39.1

1.39.1 (2026-10-21)

Bug Fixes

• build CLI releases with Go 1.26.10 (#571) (1097d74)
• explain missing file-write permission in readable errors (#550) (03b1ccd)
• normalize automatic download filenames (#556) (4deb0c1)
• preserve literal PowerShell reference completions (#554) (d39c80b)
• reject symlinks as explicit download destinations; use the target path directly (e539d97)
• require HTTPS for remote API endpoints (#549) (2f2232a)
• use visible generated names for automatic hidden filename suggestions (fa7f917)

Chores

• api: describe 30-minute cache-write usage counts (#551) (e963b2f)
• deps: bump actions/cache from 4.3.0 to 6.1.0 (#544) (34a9790)
• deps: bump actions/download-artifact from 8.0.1 to 8.0.2 (#545) (fb273e3)
• deps: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#542) (31ea038)
• deps: update openai-go to v3.84.0 (#569) (74fe949)
• finish generated tooling layout (#566) (9e47d2e)
• refresh API-key constraints and Castiron reporting (#564) (9983bef)

Refactors

• admin: isolate credential and secure setup workflows (#553) (44fa4f3)
• app: consolidate handwritten application runtime (#563) (7639dab)
• app: move help assembly out of custom (#561) (7e8300a)
• app: own optional first-run setup admission (#562) (4a159a6)
• audio: isolate speech and local audio workflows (#557) (f5558be)
• images: isolate image workflows and presentation (#560) (6ec6708)
• models: separate workflows and shared list navigation (#548) (82d5341)
• remove legacy runtime adapter (#565) (04e59e0)