2.16.0 (2026-08-14)
Features
Bug Fixes
- auth: default keepMsalCacheEncryptionCookie to on (#2850) (cc007bf)
- deps: bump nanoid in docs-site lockfile to clear advisory #211 (#2827) (f3f5a97)
- deps: refresh docs-site lockfile to clear http-proxy-middleware advisory (#2823) (4c2785f)
- logging: remove #2587 debug instrumentation that shipped in 2.15.0 (#2814) (0af4c07)
- logging: stop logging notification text and page DOM (#2819) (2157c4f)
- menus: limit hidden-menubar accelerators to profile switching (#2821) (#2824) (2a5be99)
- network: bound the connectivity sweep so a hung probe cannot stall startup (#2816) (ace3bb7)
- notifications: load sender avatars for electron notifications (#2809) (936ffde)
- webauthn: sign the iframe's own origin for relayed ceremonies (#2828) (#2829) (e9db7b2)
Documentation
- adr: ADR-025 config option naming convention (#2836) (dcafe0a)
- adr: ADR-026 performance audit outcomes (#2838) (7689e1d)
- adr: leave the rename mechanism undecided in ADR-025 (#2843) (9c3fb70)
CI/CD
- docs: bound the docs build with timeout-minutes (#2852) (d6d4cb9)
- flatpak: smoke build on release tags, document the beta remote (#2853) (ed9a1da)
Maintenance
- add osv-scanner configuration (#2846) (a314095)
- deps-dev: bump the minor-and-patch group with 2 updates (#2820) (a00ba0a)
- deps: bump brace-expansion from 5.0.8 to 5.0.9 in /docs-site (#2802) (3d443af)
- deps: bump dompurify from 3.4.12 to 3.4.13 in /docs-site (#2805) (690e820)
- deps: bump fast-uri from 3.1.4 to 3.1.5 (#2800) (55708f5)
- deps: bump fast-uri from 3.1.4 to 3.1.5 in /docs-site (#2804) (46a25e9)
- deps: bump js-yaml from 4.3.0 to 4.3.1 (#2808) (be4ee33)
- deps: bump js-yaml from 4.3.0 to 4.3.1 in /docs-site (#2807) (8466a9f)
- deps: bump mermaid from 11.15.0 to 11.16.1 in /docs-site (#2806) (a5446b5)
- deps: bump undici from 7.28.0 to 7.29.0 (#2799) (1cea4dd)
- deps: bump undici from 7.28.0 to 7.29.0 in /docs-site (#2801) (e271012)
- deps: refresh brace-expansion in the lockfile (#2847) (fe70fb9)
- sonar: clear docker and String.raw findings (#2818) (#2825) (b82434b)
- sonar: clear the code-smell tail (#2813) (894dc4e)
Thanks
Big thanks to @app/dependabot, @app/repo-butler-app, @jochimvd, @jpenberthy for contributing to this release.