1.17.0 (2026-09-07)
Features
- api: derive routes/query from the single openapi spec (c3e4973)
- client: add postRawBody for raw binary POST request bodies (2dd7354)
- tools: add download_backup_snapshot_file (binary download=1 variant of dump) (0fe4695), references #247
- tools: add icon management tools (bd94d2f)
- tools: wrap audit log and container introspection endpoints (ff5607a)
- tools: wrap backup config endpoints (#202) (16c2708)
- tools: wrap backup destination endpoints (#202) (2e8537e)
- tools: wrap backup restore endpoints (#202) (0607273)
- tools: wrap backup snapshot + instance endpoints (#202) (9542fe0)
- tools: wrap backup stack-path probes (#202) (a9d4489)
- tools: wrap git remote branch listing and openapi spec endpoints (b6eedbb)
- tools: wrap load_image using the raw-body POST client method (9a47f7c)
Bug Fixes
- api: bound and make the /mcp JSON body limit configurable (b95fdb2), references #251
- api: cap request-body ceiling at Node's max string length (b594483), references #251
- api: reject malformed MCP_MAX_REQUEST_BODY_BYTES instead of misparsing it (f5a9cbf), references #251
- api: strip env query param in route deriver for schema parity (dc01814)
- api: treat postfix ++/-- as value-end so a following slash is division (#202) (fb16d6c), references #246
- ci: skip drift-bump push when bump PR already open + document annotation-as-contract (#226) (2eea428), references #222
- deps: update dependency pino to v10 (e968fb2)
- security: parse /mcp bodies only after the Host/Origin and bearer guards (21005d2), references #251
- tools: enforce list_git_remote_branches' repositoryId/url contract (4b0f15d), references #251
- tools: record list_git_remote_branches validation failures as errors (5f5f991), references #251
- tools: reject supplying both icon and image in set_*_icon (7dfe163), references #251
- tools: require icon or image in set_container_icon/set_stack_icon (f371edb), references #251
Code Refactoring
- api: consumers read routes/query from the single openapi source (8e1fa79)
- tools: address whole-branch review nits (#202) (74ba146)
Documentation
- api: expose MCP_MAX_REQUEST_BODY_BYTES to Compose deployments (19ba5d3), references #251
- api: refresh two stale comments after spec-source consolidation (#226) (d94e783)
- api: regenerate body-contract report after git-stacks line shift (9c874da)
- api: regenerate coverage.md against main's newer OpenAPI pin (a32b2a5), references #222
- api: single-source spec + drift-bump model (149d326)
- tools: preview_backup_restore now needs backups:view, not manage (e084e8d)