v3.16.6

Added

• Unpin from the pinned-message panel. Users with the pin_message permission (or admin) now see an Unpin button on every entry in the pinned-messages panel. Clicking it shows a confirmation before removing the pin — no more having to scroll back to the original message to unpin it, which was especially painful in encrypted DMs.

Fixed

• Webhook management ignored the manage_webhooks permission. The create-webhook, get-webhooks, delete-webhook, and toggle-webhook handlers all rejected non-admin users even when they had manage_webhooks granted through a role. The per-channel Webhooks option in the channel context menu was also hidden for them. Both are now fixed. The bot-manager panel in Admin Settings remains admin-only.
• Editing messages in a DM PiP did nothing. The edit handler always resolved the channel from socket.currentChannel. If you were viewing a server channel while a DM was open in the floating PiP, the edit silently failed and rolled back. The handler now accepts an optional channelCode from the client (same pattern as delete), and the client sends it when editing from the PiP.
• Encrypted image upload failure toast always said the same generic message. The error toast for encrypted image upload failures now includes the underlying error (e.g. "Upload failed (403)") instead of a fixed string.