Changelog

What changed for people using the product. Not every commit.

5 September 2026

Clearer agent handoffs and scan results

Choose Review only or Review and apply fixes, with a separate yes or no for uploading. Upload reports list new, resolved and reopened alerts, the reasons and the score change. A read-only findings command prints versioned JSON. A bad key tells you the reconnect command and exits cleanly, including on Windows. The CLI parts need vibebeacon 0.4.1, which is not on npm yet.

5 September 2026

Check cadence is now what the pricing page says

Advisory feeds stay on a 10 minute pull for every plan. Free and Pro apps are matched every 30 minutes. Team apps, and a live trial, are matched every 10 minutes. A new or updated manifest still matches immediately on every plan.

5 September 2026

Generic webhooks refuse private destinations

A Team webhook has to be a public https URL. Loopback, private, link-local and cloud metadata hosts are refused at save time and again at delivery, including after DNS and redirects.

4 September 2026

Passkeys

You can sign in with a passkey, a magic link or GitHub. Passwords are still not stored.