1.37.1 — WebApp cache fixes and tighter data access

2026-10-20

Corrects hosted WebApp caching and keeps prior fingerprinted assets available while tightening storage authorization, nested-user privacy, and SMS sign-in secret handling.

Changed

• Hosted WebApp pages and unhashed assets now require revalidation, while fingerprinted assets keep long-lived immutable caching.
• WebApp deployments keep fallback links to the prior two serving releases so old fingerprinted asset URLs continue to resolve after a deploy.

Security

• Storage creation and upload paths now require appropriate group membership or file permissions before any write, and unsafe storage purpose names are refused.
• Nested user responses hide seven private account fields from viewers without full account access and refuse filters on those fields.
• SMS sign-in codes and links are redacted from stored message bodies and relay metadata, with an opt-in cleanup command for existing rows.