Changelog

The canonical changelog is CHANGELOG.md in the repository. It is the single maintained record of backend releases and of the gobananas-cli / gobananas-mcp proxy versions.

Since 1.3.0

Changes merged to main after the 1.3.0 entry (dates are merge dates):

• Square by default (26 September 2026) — generate_image (and POST /api/images) now makes a square image when no aspect ratio is given and no scene, style preset or character supplies one. Before, the model chose its own shape. Edits with no ratio from the request, a scene, style preset or character still keep the source image's shape.
• Account deletion and data export (25 September 2026) — self-service from Your account: download everything as one JSON file, or delete your account after a 7-day grace period. See Account & Privacy.
• Data retention (25 September 2026) — expired sign-in sessions, tokens, one-time links and old job logs are deleted on an hourly schedule.
• API keys stored only as hashes (25 September 2026) — Go Bananas API keys are kept as SHA-256 hashes and shown once, at creation. Older plain-text keys keep working and are converted automatically. Since 26 September a revoked key can no longer authenticate through an old plain-text entry.
• Email confirmation for new signups (24 September 2026) — self-signup accounts confirm their email before a workspace is created.
• MCP host and listings (24 September 2026) — https://mcp.gobananasai.com is the MCP address (https://gobananasai.com/mcp still works), with a public setup page at gobananasai.com/connect, a plugin for Claude Code and Codex, and a listing on the official MCP Registry as com.gobananasai/go-bananas. Every MCP tool now carries a title and read-only/destructive hints.

CLI and MCP proxy releases

gobananas-cli and gobananas-mcp share a version line (Node.js 20.3 or later). See the CLI guide for usage.

• 1.3.6 — when Go Bananas rejects the sign-in, the MCP proxy says the tool did not run and is safe to retry, instead of warning that it may have completed.
• 1.3.5 — the MCP proxy and CLI read the browser-login token for every request and refresh it on a 401, so a long session no longer fails a call with "Access token has expired". Also the first published release to carry the 1.3.4 changes.
• 1.3.4 — MCP session hardening, agent connector hardening and gallery recovery. Not published to npm on its own; its changes shipped in 1.3.5.
• 1.3.3 — explicit subscription generation goes through the dedicated fail-closed MCP tool, and a missing images:generate OAuth scope is reported instead of claiming the subscription is ready.
• 1.3.0 – 1.3.2 — subscription routing, explicit generation lanes, source/billing provenance and subscription status commands.

Highlights

• 1.3.0 (21 September 2026) — Codex subscription image generation through a hosted runner, with the generate_with_subscription and get_subscription_status tools.
• 1.3.0 — upload_media and POST /api/media/upload: video, audio and image uploads become durable public R2 URLs with the original extension preserved.
• 1.3.0 — Posters, Higgsfield video handoff and automated character identity refresh as first-class MCP tools.
• 1.3.0 — Nano Banana 2 Lite (gemini-flash-lite-image) became the default model, and OpenAI GPT Image 2.5 Flare and Sunburst joined the model registry.
• 1.2.0 (1 May 2026) — Multi-provider image models: OpenAI gpt-image-2 alongside Gemini Flash and Pro, with a per-request model_id override and a per-tenant allowlist.

Version History

Versioning Policy

Go Bananas! follows Semantic Versioning:

• MAJOR: Breaking API changes
• MINOR: New features, backward compatible
• PATCH: Bug fixes, backward compatible

API Versioning

The API is currently unversioned. Future breaking changes will be introduced with:

/api/v2/images

The original endpoints will remain available during deprecation periods.

Deprecation Policy

1. Announcement: 3 months before removal
2. Warning Headers: X-API-Deprecated: true
3. Documentation: Updated with migration guides
4. Removal: After deprecation period

Migration Guides

Migrating to 1.0

If upgrading from pre-release versions:

1. Database Migration

   npm run db:migrate

2. Update API Keys

   • Old format keys continue to work
   • New keys use sk_live_ prefix

3. MCP Configuration

   • Update to new streamable HTTP transport
   • SSE endpoint remains for legacy support

Roadmap

Planned work is tracked as issues at github.com/davendra/go-bananas-app/issues. Useful labels: production-safety, spec, enhancement.

Next Steps

• Glossary →
• FAQ →
• Contributing →