8.1.0 (2026-05-23)
Features
- release: promote dev to main — security hardening batch (#1351) (aed942f), closes #1340 #1341 #1342 #1344 #1346 #1347 #1348 #1349 #1350 #1345 #1353 #1340 #1354 #1347 #1352
Bug Fixes
- analytics: harden sqlite3 invocation for native Droid usage scan (#1347) (469c9ff)
- analytics: support sqlite3 path resolution on Windows and NixOS (#1354) (9a42098), closes #1347
- ci: prevent promote-release tag command injection (#1350) (3b94ec8)
- cliproxy: disable spoofable default bg keepalive probe (#1340) (f0ec820)
- cliproxy: sanitize local port before config regeneration (#1342) (af7aa0c)
- codex-auth: stop spawning powershell in shell detection (#1348) (825efb8)
- codex-quota: guard feature label type in quota windows (#1346) (b71fe5d)
- dispatcher: also treat -p as non-subcommand short for --print (#1352) (8335f0c)
- dispatcher: treat --print as non-subcommand Claude session (#1341) (fd561b5)
- models-dev: sanitize models.dev registry entries and harden pricing resolver (#1345) (9cd9b79)
- pricing: guard malformed models.dev model entries (#1344) (66966f3)
- ui-docs: remove third-party runtime assets from health report (#1349) (58df999)