0.44.0 - 2026-10-11
Highlights: Upload Photos media, configure Meet settings, and add Gmail signatures, with Go security fixes and dependency updates.
- Photos: upload media and list/create app-created albums with an explicit append-scope opt-in; preserve read-only defaults and narrowed grants during reauthorization. (#1185) — thanks @beyondzero.
- Meet: configure recording, transcription, smart notes, attendance reports, and moderation through explicit create/update flags; preserve omitted settings with per-field update masks. (#1182) — thanks @regaw-leinad.
- Gmail: add
--signature,--signature-from, and--signature-filetogmail drafts create,gmail drafts update,gmail forward, andgmail drafts forward; the signature follows the sending alias and sits above the quote or between the note and the forwarded message. (#1193) — thanks @adameq. - Security and dependencies: build with patched Go 1.27.2, test the Go 1.26 minimum series on 1.26.9, and refresh goimports, deadcode, and Cloudflare Workers types while preserving the Go 1.26.0 floor and worker release cooldown.
- Gmail: include recipient headers and optionally sanitize message-search content through CLI and MCP; preserve untrusted sender/recipient wrapping across JSON projection. (#1188) — thanks @kendrickkester.
- Gmail: preserve omitted Cc/Bcc recipients when updating drafts and allow explicit empty values to clear them. (#1186) — thanks @karyandrew.
- Gmail: allow explicitly empty bodies with attachments while still rejecting omitted message content. (#1189) — thanks @jaysonsantos.
- Gmail: preserve standard payload header identifiers under
--wrap-untrusted, keep custom names and values wrapped, and wrap flattened sender/recipient display text. (#1183) — thanks @postoso. - Docker: pre-create
/persist/gogcliowned by the non-rootgoguser so the documented named-volumeGOG_HOMEis writable on first run, and document the one-time ownership step for bind mounts and pre-existing volumes. (#1197) — thanks @wstock. - Dependencies: refresh Google API and telemetry modules, tracking-worker packages, pnpm 11, and x/tools while retaining the Go 1.26 floor and worker release cooldown.
- Dependencies: update Google API/auth, MCP, networking and cryptography modules, Wrangler, Workers types, Vite, and patched Sharp 0.35.5 (GHSA-wq5f-xc86-pv6w) while retaining Go 1.26, pnpm 11, and the worker's 24-hour release cooldown.
- Gmail: document the option delimiter for search queries beginning with
-, with thread and message examples and flags-before-delimiter guidance. (#1184) — thanks @postoso. - Auth: make the documented doctor preflight inspect diagnostic status before continuing, and clarify diagnostic exit semantics. (#1195, #1198) — thanks @coygeek and @goutamadwant.
- Auth: direct doctor recovery hints to preserve recorded services, scope modes, extra scopes, and the OAuth client instead of requesting the default grant. (#1196) — thanks @coygeek.
- Docs: select gog skills explicitly during installation and identify the separate maintainer-only Crabbox skill. (#1194) — thanks @coygeek.