Arcade 1.8.9

App version 8222603 · released 2026-06-18 · previous 1.8.8

Release notes

engine.ssrfAllowlist — allowlist internal/private hosts that user-created workers and MCP servers are permitted to reach. By default the engine refuses to dial private/internal IPs from user-supplied URLs; entries here punch holes in that block. Each entry is either an exact target (scheme://host[:port], e.g. https://worker.internal:8000) or a wildcard suffix (*.corp.internal, matching any subdomain). Empty by default, which preserves the strict private-IP block.

Google Slides — build and edit presentations.
X (Twitter) — toolkit overhaul with expanded tool coverage.
Gmail — now supports the VS Code chat host.
Ashby — archive_application rejects or archives a candidate at a pipeline exit.

Project invite emails now show the inviter's email address and a styled join link.
Gmail toolkit returns explicit guidance when a chat host does not support a requested capability, instead of failing opaquely.

MCP gateway tool errors retain their additional_prompt_content, so client-side guidance survives tool failures.
Dashboard no longer shows a black screen on cold loads of redirect routes.
OIDC user sources validate the configured issuer and surface the underlying error when sign-in fails.
Onboarding eligibility no longer fails when the members payload omits optional fields.

Retired the dashboard welcome page and the guided onboarding tour.
Removed the deprecated Gemini CLI option from the MCP connect UI and toolkit catalogue.

New optional Helm value engine.ssrfAllowlist (default []). Existing deployments are unaffected: the strict private-IP block stays in force until you add entries. Set it only when workers or MCP servers must reach hosts on internal/private networks.

MCP gateway tool-error responses now preserve additional_prompt_content.
A new built-in tool lets agents report capability gaps.
OIDC sign-in validates the user-source issuer and returns the upstream error detail on failure.