Arcade 1.8.3

App version 483e7ab · released 2026-05-28 · previous 1.8.2

This release has upgrade notes

Read the upgrade notes before upgrading: they list what you must do before or during the upgrade.

Release notes

experience-api dependency drizzle-orm patched for a SQL-injection advisory (unescaped identifiers).

New auth.cliRedirectUris value — loopback callback URIs for arcade login (defaults match the CLI's 127.0.0.1:9905, plus IPv6 and localhost forms).
New Forkable meal-picker toolkit in the worker image.

unknown_client OAuth errors now return CIMD-specific guidance to diagnose unregistered clients.

Self-hosted arcade login works end-to-end on chart defaults: corrected the CLI OAuth authority URL, authorization/token paths, CLI client registration, and allowed scopes.
MCP tool errors are returned as isError: true results instead of JSON-RPC protocol errors, so MCP clients see tool failures correctly.
Catalog pagination no longer loops infinitely past the last key.
Dashboard register link routes through registerOrRedirect and forwards search params.
Hardened the Arcade.* tool-name prefix check in tool discovery.

All new values are optional with safe defaults; a no-values upgrade fixes self-hosted arcade login with no further action.
Per-service image tags advance with appVersion from ac72220 to 483e7ab; installs pinning <service>.image.tag are unaffected.

MCP error semantics and catalog pagination correctness changes (above) affect responses to agents and MCP clients.