v5.1.16

What's Changed

• fix(ci): drop [skip ci] from release commits so cloud builds run on release by @brendan-kellam in #1696
• fix(web): silence MaxListenersExceededWarning on proxied rewrites by @brendan-kellam in #1697
• docs: fix Book a Call link by @msukkari in #1706
• chore: upgrade next to 16.3.8 to address CVE-2026-94545 by @jsourcebot in #1709
• docs: refresh README around agent context and setup wizard by @msukkari in #1711
• fix(web): keep Ask model selection in sync with config changes by @jsourcebot in #1710
• chore: upgrade markdown-it to ^14.3.2 to address GHSA-253c-mchw-3w2r by @claude[bot] in #1702
• chore: upgrade nodemailer to ^10.0.2 to address GHSA-6vj9-mwq6-2f5v, GHSA-8vvx-rff5-p5rq by @claude[bot] in #1703
• chore: upgrade fast-uri to ^3.1.8 to address CVE-2026-86472 by @claude[bot] in #1701
• chore: upgrade brace-expansion to ^1.1.21, ^2.1.7, ^5.0.12 to address CVE-2026-102276, CVE-2026-102277, CVE-2026-102278 by @claude[bot] in #1700
• chore: upgrade ip-address to ^10.7.2 to address CVE-2026-101910, CVE-2026-101911, CVE-2026-101912, CVE-2026-101913 by @claude[bot] in #1695
• chore: upgrade seroval to ^1.6.8, proxy-addr to ^2.0.8, shell-quote to ^1.12.0, @grpc/grpc-js to ^1.14.6 to address CVE-2026-104846, CVE-2026-104845, CVE-2026-90711, CVE-2026-102422, CVE-2026-101916, CVE-2026-101915 by @brendan-kellam in #1713
• chore: upgrade engine.io to ^6.6.11, source-map-js to ^1.2.2, smol-toml to ^1.9.0, fast-copy to ^3.1.0, dompurify to ^3.4.16 to address CVE-2026-102599, CVE-2026-93749, GHSA-r4xh-jqrq-34v2, GHSA-jggr-w7fw-pc2j, GHSA-p98j-92pf-mc4p, GHSA-6688-9rhm-gjv2 by @brendan-kellam in #1714
• chore: upgrade golang.org/x/crypto to v0.56.0 to address CVE-2026-56855, CVE-2026-78662 by @brendan-kellam in #1716
• chore: upgrade @modelcontextprotocol/sdk to ^1.32.1 to address CVE-2026-104850 by @claude[bot] in #1719
• chore: upgrade katex to ^0.18.2, postcss-selector-parser to ^7.1.6 to address CVE-2026-103923, CVE-2026-104844 by @brendan-kellam in #1717
• fix(web): match .gitattributes patterns in subdirectories by @breken-ai in #1692
• fix(backend): decode percent-encoded characters in generic git URL repo names by @Tyagiquamar in #1666
• feat: add option to exclude private repos from indexing by @er0k in #1632
• fix(web): keep selected search filters visible by @dipeshbabu in #1685
• fix(web): support multiline highlight ranges in LightweightCodeHighlighter by @riteshvish02 in #1699
• chore: upgrade simple-git to ^4.0.2 to address CVE-2026-102826, CVE-2026-102827, CVE-2026-102828, CVE-2026-102829 by @brendan-kellam in #1715

New Contributors

• @breken-ai made their first contribution in #1692
• @Tyagiquamar made their first contribution in #1666
• @er0k made their first contribution in #1632
• @dipeshbabu made their first contribution in #1685
• @riteshvish02 made their first contribution in #1699

Full Changelog: v5.1.15...v5.1.16