2.21.1 (2026-05-13)

Bug Fixes

• config: allow http OPENAI_API_BASE for loopback and RFC1918 (#372) (08ccc0f)

2.21.0 (2026-05-05)

Features

• chat: create session files with 0600 owner-only permissions (#366) (d29d346)
• config: validate OPENAI_API_BASE against SSRF risks (#367) (262af09)
• input: restrict --input file reads to safe roots (#369) (757d173)
• stdin: cap input size to prevent unbounded memory growth (#368) (151bab9)

2.20.0 (2026-04-26)

Features

• give the OpenAI HTTP transport dial and header timeouts (#363) (177a1cd), closes #357
• shell: reject multi-line LLM output so bash -c can't execute hidden commands (#365) (d3ba6ad), closes #360

2.19.0 (2026-03-01)

Features

• lint: enforce full linting and fix reported issues (#351) (14f0d36)

Bug Fixes

• fix env isolation and add DI improvements (#354) (9b8bfb8)

2.18.0 (2026-02-26)

Features

• add prompt templating with --template flag (#349) (8bf40f9)

2.17.6 (2026-02-18)

Bug Fixes

• security fixes (#347) (288f76c)

2.17.5 (2026-02-08)

Bug Fixes

• correct boolean logic in image URL detect (#344) (407cfd8)
• fix govulncheck by upgrading go (#346) (33e6ce4)

2.17.4 (2026-01-08)

Bug Fixes

• fix goreleaser docker build (d6d6925)

2.17.3 (2026-01-08)

Bug Fixes

• fix gorelaser docker image build (8cdcde9)

2.17.2 (2026-01-08)

Bug Fixes

• deps: update module github.com/spf13/cobra to v1.10.2 (e87bc36)
• upgrade gh action to fix error (7f5546f)