From 3149457bf74ab0172150fa24a2cf6fd55545df42 Mon Sep 17 00:00:00 2001
From: Nicolas Varrot <contact@nicolasvarrot.fr>
Date: Fri, 13 Feb 2026 03:27:59 +0000
Subject: [PATCH] =?UTF-8?q?docs:=20release=20v1.28.1=20=E2=80=94=20securit?=
 =?UTF-8?q?y=20headers=20and=20nginx=20caching=20fix?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 CHANGELOG.md | 7 +++++++
 package.json | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 06a1633..188ebe6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,13 @@ All notable changes to PinchChat are documented here.
 
 Format based on [Keep a Changelog](https://keepachangelog.com/), with [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [1.28.1] — 2026-02-13
+### Fixed
+- Docker: added security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy)
+- Docker: index.html is no longer cached, ensuring SPA updates are always picked up after redeploy
+### Changed
+- Added `engines` field (`node >=18`) and `lint:fix` npm script to package.json
+
 ## [1.28.0] — 2026-02-13
 ### Added
 - Multi-tab split view — open 2 sessions side by side with a resizable divider
diff --git a/package.json b/package.json
index de409fe..acf5690 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "pinchchat",
-  "version": "1.28.0",
+  "version": "1.28.1",
   "description": "A sleek, dark-themed webchat UI for OpenClaw — monitor sessions, stream responses, and inspect tool calls in real-time.",
   "type": "module",
   "repository": {