v0.16.2 - 2026-05-23
Security
- fix(xss): encode tag text in Awesomplete autocomplete suggestions
- fix(xss): sanitize href protocols in rendered Markdown HTML
- fix(xss): sanitize thumbnail update DOM insertions
- update vulnerable frontend/npm dependencies
Changed
- build: update frontend tooling to Yarn 4.x and Node.js 22
Added
- doc: add documentation for building/testing Docker image locally
- doc: add documentation for running GitHub Actions locally with
act - doc: add documentation for GPG_TTY on headless build environments
Full Changelog: v0.16.1...v0.16.2