v0.16.0

Minor Changes

• Require explicit HTTP request payment preferences by default; opaque reqwest client defaults cannot trigger automatic payments. Add AcceptPaymentPolicy::Explicit and Disabled. Set request-level Accept-Payment, or opt into provider-selected payment with Always. Channel store adapters now require native atomic compare-and-exchange; unsupported backends fail closed. Prevent unconfirmed channel opens from increasing cumulative vouchers before settlement reconciliation. (by @DerekCofausper, #580)

Patch Changes

• Limited autoswaps to the missing balance and bounded input spending independently of quotes. Added an optional max_amount_in budget, defaulting to parity plus slippage. Sponsored validation accepts positive swap outputs up to the payment amount. Existing AutoswapConfig struct literals must add max_amount_in: None; the constructor remains unchanged. (by @DerekCofausper, #580)
• Scoped relay idempotency keys to individual broadcast attempts, overriding custom-client defaults so cached receipts cannot authorize separate operations. Uncertain payment outcomes require separate recovery. (by @DerekCofausper, #580)
• Preserved funded native channel descriptors after server close receipts, rejections, and pending on-chain closes until trusted chain state confirms the escrow is no longer funded. (by @DerekCofausper, #580)
• Fixed automatic session management to preserve the configured HTTP client and strip hop-by-hop request headers. Middleware callers can provide the same client with with_http_client; automatic top-ups are disabled when it is absent. (by @DerekCofausper, #580)

What's Changed

• ci: run Cyclops warden on every push and after audit commands by @decofe in #563
• fix: keep metering blocked after ambiguous channel close by @brendanjryan in #569
• chore: pin gh-actions references to 947d9a3c by @sds in #570
• fix: bound autoswap spending and acquire only deficits by @brendanjryan in #566
• fix: consume relay credentials without cached receipts by @brendanjryan in #567
• fix: retain channel descriptors until chain confirms closure by @brendanjryan in #572
• fix: preserve HTTP policy for session management by @brendanjryan in #573
• fix(ci): buffer the action update cooldown by @decofe in #575
• fix: require explicit payment and atomic channel updates by @brendanjryan in #574
• fix(ci): pin dependencies for CI and fuzz testing by @decofe in #579
• fix(ci): resolve dependencies before docs and release by @decofe in #580
• chore: release v0.16.0 by @tempo-github-sts[bot] in #571

Full Changelog: v0.15.1...v0.16.0