Changelog
Behaviour a tenant sees, dated. Install and upgrade notes for operators are not on this list.
2026-08-21
Beside its allowed private ranges, an environment now carries a list of allowed hosts for API calls, token endpoints and mail servers alike. It is opt-in: an empty list means any public host, as before. A tenant admin sets it in the browser.
2026-08-21
The api-key credential on a connection now says where it goes: a request header or a named query parameter. A key typed into a call's own query values stays a plain configuration value until it is moved to the connection; treat such a key as exposed and have it re-issued.
2026-08-19
Every command declares the flags it reads; anything else exits with code 2 and names what was typed and what the command accepts. A misspelled --dry-run can no longer perform a real apply. A switch no longer swallows the word after it, so run --no-wait my-script names its script.
2026-08-18
A call to a private, loopback or cloud-metadata address is refused unless the environment's egress policy allows the range; a tenant admin allows ranges in the browser. The cloud-metadata service is never reachable, whatever the list says.