Impact Score: 5/10
Ghost 2.16.4 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: ghost · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Ghost 2.16.4. Source highlight: **Contains critical fixes for sites appearing in private mode and v0.1 API user/pass auth failing.**
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (5)
- 🐛 Fixed private blogging getting enabled on restart after saving any setting (TryGhost/Ghost#10576)
- 🐛 Fixed v0.1 API username/password authentication
- 🐛 Fixed custom certificate usage for MySQL (TryGhost/Ghost#10573)
- 🐛 Fixed error when creating subscribers via the admin area
- 🐛 Fixed email address not being returned in user responses from v2 Admin API using api key authentication
📄 View Raw Release Notes (Original Developer Log)
**Contains critical fixes for sites appearing in private mode and v0.1 API user/pass auth failing.**
If you are on an earlier 2.16.x release please upgrade!
* 🐛 Fixed private blogging getting enabled on restart after saving any setting (TryGhost/Ghost#10576)
* 🐛 Fixed v0.1 API username/password authentication
* 🐛 Fixed custom certificate usage for MySQL (TryGhost/Ghost#10573)
* 🐛 Fixed error when creating subscribers via the admin area
* 🐛 Fixed email address not being returned in user responses from v2 Admin API using api key authentication
You can see the [full change log](https://gist.github.com/e5d23a51fb0a422d2a788432c04ce8c2) for the details of every change included in this release.