Desktop v0.0.30

Full Changelog: v0.62.0-nightly.20260916.g6a466a7e2...v0.62.0-nightly.20260917.g6a466a7e2

What's changed

• Added a visible warning when memory usage is critical, with steps to free memory or restart safely
• Added CLAUDE_CODE_MCP_STARTUP_WAIT_MS to bound how long the first non-interactive turn waits for connecting MCP servers (0 = don't wait)
• Added effort attribute to the claude_code.llm_request OpenTelemetry trace span, matching the api_request event
• Added claude_code.managed_settings_resolved OTel event: managed-settings sources and policy helper state; redacted settings and digests with OTEL_LOG_MANAGED_SETTINGS=1
• Added store.connect_timeout_seconds to the Claude apps gateway config to lengthen the Postgres connect timeout (default 5 seconds), and improved the boot error when the database is unreachable to point to store.postgres_url and the configured timeout
• Added enduser.sub, the IdP subject, to the telemetry Claude Desktop and Cowork send through a Claude apps gateway
• Added a Claude apps gateway warning when a replica has more requests open than the 256 it sends upstream at once, and a startup log line showing that limit
• Added click-to-expand for collapsed teammate and agent messages in fullscreen mode
• Fixed sessions getting stuck endlessly retrying "unexpected tool_use_id" 400 errors: corrupted transcripts now self-heal where possible, and otherwise a clear error (with a /rewind hint) ends the loop
• Fixed MCP servers configured as http that only speak legacy HTTP+SSE failing to connect when they answer the first request with 422 or another 4xx error
• Fixed Streamable HTTP MCP tool calls timing out after about 5 minutes even when a longer per-server timeout was set
• Fixed MCP prompts and resources not refreshing when a server sends list-changed notifications without declaring listChanged
• Fixed MCP tool calls refused with 403 insufficient_scope being reported as an expired sign-in: the error now names the missing permissions and points to /mcp re-authentication
• Fixed hook-driven sessions (such as an active /goal) ending with "Prompt is too long" instead of compacting when the context overflowed again after a reactive compaction
• Fixed an active /goal being lost when resuming (--continue / --resume) a session that had compacted
• Fixed claude agents losing --model, --effort, --permission-mode, --allow-dangerously-skip-permissions and --agent after an auto-update relaunch
• Fixed a per-turn slowdown when a language server publishes project-wide diagnostics for thousands of files
• Fixed subagents with model: "opus" on Bedrock, Vertex or Foundry leaving the session's model when its id has no recognizable model family (unless ANTHROPIC_DEFAULT_OPUS_MODEL is set)
• Fixed self-hosted runner sessions failing every turn with a 401 after a few failed token refreshes, until the next scheduled refresh; the runner now keeps retrying, and fetches a new token after a 401
• Fixed clickable links to local file paths doing nothing in VS Code and other terminals that require a file:// URI
• Fixed the transcript renumbering ordered lists in your own messages (typing "3. 2. 1." displayed "3. 4. 5."); numbers and "N)" markers now show as typed
• Fixed AskUserQuestion preview notes being attached to a previously chosen option instead of the highlighted one
• Fixed AskUserQuestion preview mode dropping the highlighted option when submitting a note with Enter
• Fixed a resumed background agent keeping half of an interrupted tool batch when one of its calls was approved with a message
• Fixed a local claude -p --resume started with CLAUDE_CODE_RESUME_INTERRUPTED_TURN not reporting background tasks the previous process left unfinished
• Fixed the first turn of a cloud session sometimes starting without the tools of an SDK-hosted MCP server that was still connecting
• Fixed background agent notifications claiming the agent had no live background work when it was still waiting on its own background task and would resume
• Fixed error hints in Claude Desktop sessions to suggest slash commands like /usage-credits instead of CLI flags that cannot be used there
• Fixed /schedule saving a routine's prompt without its message role when Claude writes the routine in the shape that listing routines returns
• Fixed /status not showing the apiKeyHelper failure that its own error banner told you to check
• Fixed /fast on in non-interactive sessions reporting on and then turning off under an organization's managed fast mode policy; it now says the organization has disabled it
• Fixed the Artifact tool asking you to approve an update to an artifact that it then refused because the session had not read the latest version
• Fixed Cowork and claude.ai cloud sessions with network access on treating reads of a teammate's artifact as if network access were off
• Fixed a plugin or marketplace directory with no git repository of its own taking its version from an enclosing git repository, such as a git-managed ~/.claude
• Fixed --strict-mcp-config with an empty --mcp-config holding the first non-interactive turn for up to MCP_TIMEOUT on incidental MCP servers
• Fixed Stop prompt hooks re-sending their whole prompt on every block in a conversation; repeat blocks now name the condition with a 500-character label
• Fixed extra empty editor windows opening at startup on Linux under Wayland when running inside the Cursor or VS Code terminal
• Fixed an unhandled promise rejection in the Claude apps gateway when Postgres drops a connection during a spend check
• Fixed Claude apps gateway cutting every open stream on SIGTERM: it now lets in-flight requests finish for up to 25 seconds before exiting (CLAUDE_GATEWAY_DRAIN_TIMEOUT_MS)
• Fixed installed_plugins.json being rewritten on nearly every start-up when plugin policy comes from remote managed settings, which made Claude Desktop reload every open session's plugins
• Fixed headless and SDK sessions making a separate model call for every background task that finished; completions already queued are now answered by one call
• Fixed the Bash tool re-sourcing the shell profile (a multi-second stall on the next command) after every plugin reload; it now does so only when the plugins' bin/ directories changed
• Fixed plugins with a top-level $schema in hooks/hooks.json showing an "unknown key" notice
• Fixed MCP connection errors and the MCP login tool's description showing secrets resolved from ${VAR} placeholders in MCP configs
• Fixed Bash permission checks for commands that loop over or assign certain special shell variables; these commands now ask for permission
• Fixed worktree-isolated sessions accepting Bash commands with certain nested shell expansions; these are now refused
• Fixed the Edit permission prompt preview sometimes showing a different location than the approved edit in files with multi-byte characters
• Fixed background commands being stopped after 30 idle minutes on machines under mild memory pressure; they're now stopped only when memory is critically low, and the debug log says why
• Fixed a message a subagent sends to the main session disappearing from the Claude Desktop transcript after a relaunch
• Fixed a plugin loaded from a .zip being served from a stale extraction after several overlapping reloads
• Fixed a sub-agent's progress summary being replaced by a runaway multi-paragraph reply
• Improved startup in --input-format stream-json sessions: the first turn no longer waits up to 2s for still-connecting MCP servers whose tools tool search defers; they arrive on a later turn
• Improved Monitor tool notifications: a script's final output and its exit now arrive as one notification instead of two, saving a model turn
• Improved Artifact tool errors: when you are not signed in to claude.ai the terminal now says so on the first attempt, and Claude is told to stop retrying a rejected call sooner
• Improved artifact publishing: a publish built on an older version is stopped before it is sent, with the newer page to merge
• Improved safety checks before removing an agent worktree that contains submodule checkouts
• Improved OTEL_LOG_RAW_API_BODIES=file:<dir> output: a new index.jsonl and request_body_id / message.id event attributes link each response to its request file and transcript message
• Improved Claude apps gateway boot: it now tries the first Postgres connection up to three times before exiting, so a database that is reachable a few seconds late no longer fails the boot
• Improved the Claude apps gateway's spend-limit check under load: it now takes one database round trip instead of four, so fewer checks time out on a busy gateway
• Improved Claude apps gateway sign-in rate limit errors: /login now explains the refusal, and the gateway log says which limit was hit and which setting to change
• Changed Bedrock, Vertex, Foundry and telemetry-disabled installs to use the v2 MCP client and MCP 2026-07-28 negotiation with direct HTTP servers by default, as other installs already do (opt out: MCP_SDK_GENERATION=v1 or MCP_PROTOCOL_NEGOTIATION=legacy)
• Changed /code-review to use leaner inline review prompts for every model that has no tuned settings of its own, instead of spawning many review subagents
• Changed "type": "sdk" MCP entries in .mcp.json, settings, plugins and agent files to be skipped with a warning: only an SDK host application can register in-process servers
• Changed artifact watching in local sessions: a new version published elsewhere no longer starts a turn; Claude learns of it from a later Artifact tool result
• Changed plugin and marketplace clones to leave Git LFS files as pointers instead of downloading them; git lfs pull in the checkout fetches them
• Changed self-hosted runners to skip a read-only repository the git host refuses at the access check instead of failing the session start
• Changed the /status GitHub line to read "Cloud sessions", and /web-setup, /ultrareview, and teleport messages to say "cloud session" instead of "Claude Code on the web"
• [VSCode] Added continuation of the step a window reload interrupted, labeled in the chat, with a Claude Code: Continue After Reload setting to turn it off
• [VSCode] Added Memory and Instructions entries to the Customize menu: Memory shows the auto-memory toggles, the saved memories and the memory folders, and Instructions edits the CLAUDE.md files
• [VSCode] Added a claudeCode.lockEditorGroups setting to stop Claude from locking the editor groups it opens in
• [VSCode] Fixed a /btw side question asked in a new conversation's first seconds occasionally showing another session's side-question history
• [VSCode] Fixed a brief freeze when the extension first looks up your global gitignore file
• [VSCode] Fixed a message sent while Claude was running a tool disappearing from the conversation after a window reload
• [VSCode] Fixed the Manage Plugins enable toggle and MCP servers dialog rows being unreachable from the keyboard
• [VSCode] Fixed sign-ins and sign-outs made in a terminal not showing until a reload after CLAUDE_CONFIG_DIR changed in the Environment Variables setting
• [VSCode] Fixed Edit diffs in the chat being cut off at the bottom at some panel widths and for long wrapped lines; diff boxes now fit the rows shown
• [VSCode] Fixed overlapping settings writes from the extension leaving ~/.claude/settings.json unparseable or dropping a setting
• [VSCode] Fixed Open in New Tab (Ctrl/Cmd+Shift+Esc) sometimes leaving the new tab's message box unfocused, so typing went nowhere until you clicked it
• [VSCode] Fixed reopening a closed Claude tab splitting the editor layout when its locked group still holds another Claude tab and a file
• [VSCode] Fixed New session opening another locked editor group whenever a file tab shared the group with your Claude tab
• [VSCode] Fixed session names shifting sideways in the session picker while typing a search query
• [VSCode] Fixed the plan review card cutting off its Send feedback button and reason field when a plan has several comments; the comment list now scrolls
• [VSCode] Fixed inline code and code blocks in chat replies being unreadable under the High Contrast themes
• [VSCode] Improved screen reader navigation of the conversation: each message is announced as "You" or "Claude", with the tool name for tool steps
• [VSCode] Changed the default global gitignore file to $XDG_CONFIG_HOME/git/ignore when XDG_CONFIG_HOME is an absolute path
• [Claude Code on the web] Added a "Compare against" branch picker to a cloud session's diff view, so you can diff its changes against any branch instead of only the base branch
• [Claude Code on the web] Fixed git operations in cloud sessions failing with "service unavailable" when GitHub's token renewal briefly errors
• [Claude Code on the web] Fixed editing a routine occasionally making it fire twice or re-enabling a routine that had just been paused
• [Claude Code on the web] Fixed commits in cloud sessions occasionally failing with a signing error for a few minutes after the session's credentials refreshed
• [Claude Code on the web] Fixed the toast after saving a routine whose GitHub trigger couldn't be linked to show the reason, such as a per-repository trigger limit, instead of only "edit to retry"
• [Claude Code on the web] Fixed sessions sometimes flipping back to unread right after you mark them read
• [Claude Code on the web] Changed routines to skip a run and retry for up to 72 hours when the owner's GitHub connection is missing, instead of switching the routine off at the first failed check
• [Claude Code on the web] Changed a routine's on-hold notice: when your subscription is paused it now tells you to turn the routine back on yourself instead of promising an automatic resume
• [Claude Tag] Added a Guests setting to the Add channel and Add workspace forms in Claude Tag admin settings, so owners can pick Inherit, Allow, Channel only or Restrict up front
• [Claude Tag] Fixed Claude not answering when another Slack app or bot @mentions it; the tag now gets a reply and wakes Claude in a channel it had stopped following after days of inactivity
• [Claude Tag] Fixed Claude missing another app's message that tagged @claude right after a new Slack channel was created; it's now delivered once Claude has joined
• [Claude Tag] Fixed Claude folding a follow-up sent minutes after its last Slack message into it as a silent edit; late updates such as blockers now post as a new reply that notifies
• [Claude Tag] Fixed Claude's Slack search failing with an error whenever it searched within a single channel; it now returns that channel's matching messages
• [Claude Tag] Fixed a safety-filter stop silently resetting a Slack thread's context when nobody was waiting; Claude now always says so and no longer cancels background work still running
• [Claude Tag] Fixed email addresses in Claude's Slack replies rendering with a visible mailto: prefix; they now show as the plain, clickable address
• [Claude Tag] Fixed Claude refusing to watch an Enterprise Grid channel shared with the whole organization when asked from another workspace in the grid
• [Claude Tag] Fixed the Environment picker in Claude Tag admin settings showing a raw environment ID instead of the environment's name for archived or app-created environments
• [Claude Tag] Improved Claude's live progress checklist in Slack: capped at 2,000 characters, reposted at most every 15 minutes in busy threads, with older "Latest task list" links updated
• [Claude Tag] Removed the repeated guest-attribution note Claude appended to a Slack canvas each time it edited one in a channel using the "Channel only" guest setting
• [Code Review] Fixed re-reviews occasionally leaving a fixed finding's thread open when the new review also filed a lower-severity note under it
• [Code Review] Fixed rare reviews ending with "Code review encountered an error" when GitHub or an internal service failed transiently at launch; they now wait and retry
• [Code Review] Improved how Code Review words each posted finding: short plain sentences that say who is affected, where the code goes wrong, and the fix up front
• [Code Review] Improved the check-run card and PR comment when a review is skipped because of an organization limit: each cause now links the admin page that fixes it

What's Changed

• llama.cpp updates

Full Changelog: v0.34.1...v0.34.2-rc0

🔥 What's New: v0.17.1

• Introduces a bug fix to a tool call int type issue (f300c4f).

Matomo 5.14.0-alpha.20260916180602 (Pre-release)

We recommend to read this FAQ before using a pre-release in a production environment.

Please use the attached archives for installing or updating Matomo.
The source code download is only meant for developers and will require extra work to install it.

• Latest stable production release can be found at https://matomo.org/download/ (learn more) (recommended)
• Beta and Release Candidate releases can be found at https://builds.matomo.org/ (learn more)

Notable Changes

• [d414624dce] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553
• [7ac458f802] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484
• [7c7e95a3bd] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #65484
• [2d2f4f6d1a] - (SEMVER-MINOR) ffi: enable module by default (Matteo Collina) #65475
• [657415c6df] - (SEMVER-MINOR) lib: implement node:bench (James M Snell) #65606
• [ebcfec2f0c] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #65606
• [e1913630c3] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #65434
• [8e9151c9f2] - (SEMVER-MINOR) src: let embedders supply a builtin code cache without a snapshot (Shelley Vohr) #65352
• [889854f18b] - (SEMVER-MINOR) src,lib: implement experimental DTLS API (James M Snell) #63182
• [5198142c59] - (SEMVER-MINOR) vfs: integrate with CJS and ESM module loaders (Matteo Collina) #63653
• [5af9d72e7f] - (SEMVER-MINOR) worker: add support for Web Workers (Aviv Keller) #64894

Commits

• [59dcad3f44] - (SEMVER-MINOR) benchmark: implement node:bench version of bench tools (James M Snell) #65606
• [6bdb6dd8fa] - benchmark: fix max-regressions detection in compare.js (James M Snell) #65587
• [49d40091ba] - benchmark: add --analyze option to benchmark/scatter.js (James M Snell) #65594
• [bd40a9a19a] - benchmark: add crypto class benchmarks (Filip Skokan) #65518
• [6bff2238f5] - buffer: pad aligned allocations by a multiple of 8 (Lazizbek Ergashev) #65605
• [37d12946dd] - buffer: prevent abort on indexOf with lone surrogate needle (Rafael Gonzaga) #65430
• [02f8eb3b2d] - build: add --shared-perfetto flag (Antoine du Hamel) #65614
• [fe7032ec41] - build: enable V8 gdb/lldb plugin support (Chengzhong Wu) #65786
• [109f2caf80] - build: allow linking shared dependencies in the GN build (Shelley Vohr) #65797
• [55213fd8a8] - build: enable the V8 sandbox in shared-cage builds (Shelley Vohr) #62237
• [120929a1b3] - build: add --shared-highway configure flag (Antoine du Hamel) #65686
• [c99af0942b] - build: add --shared-abseil configure flag (Antoine du Hamel) #65682
• [431c2bf0eb] - build: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #65464
• [b6b5764c6e] - build: remove obsolete configure flags (Chengzhong Wu) #65456
• [a623ee29d9] - build,src: make --use-largepages a no-op (Joyee Cheung) #65389
• [2f494cb7aa] - crypto: fix multi-prime RSA JWKs (Filip Skokan) #65649
• [501d8ac815] - crypto: cache valid ECDH key pairs (Filip Skokan) #65615
• [3fd905ea8f] - crypto: add strict mode to --force-fips (Filip Skokan) #65645
• [54b3cdb805] - crypto: add FIPS indicator diagnostics channel (Filip Skokan) #65645
• [3e6e931fc9] - crypto: fix public PKCS8 export error (한국) #65609
• [d414624dce] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553
• [eef579047c] - crypto: validate JWK usages before key_ops (Filip Skokan) #65550
• [9a9b137a24] - crypto: fix private SPKI export error (Filip Skokan) #65550
• [9941fb5dab] - crypto: fix RSA-PSS oversized salt handling (Filip Skokan) #65550
• [09b431596a] - crypto: correct CCM decryption FIPS error message (kyungrae) #65450
• [e6b34e6f7a] - crypto: harden X509Certificate state (Filip Skokan) #65518
• [a884b6ccbc] - crypto: optimize key slot caching (Filip Skokan) #65518
• [fb512086d3] - crypto: add null checks for OPENSSL_INIT_new() (Nora Dossche) #63457
• [656504ffc0] - crypto: prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) #65112
• [15e7884732] - crypto: avoid throwing CryptoKey brand checks (Filip Skokan) #65503
• [3302bec74a] - crypto: avoid throwing KeyObject brand checks (Filip Skokan) #65503
• [7ac458f802] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484
• [7c7e95a3bd] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #65484
• [0539e90110] - deps: update googletest to 283c17563fe7a1111cd7f581aa5d541e8baeff2f (Node.js GitHub Bot) #65833
• [e34af820da] - deps: update simdjson to 4.6.11 (Node.js GitHub Bot) #65834
• [5fb7ffebc2] - deps: update zlib to 1.3.2.1-motley-285e94b (Node.js GitHub Bot) #65835
• [05cdf1db62] - deps: V8: backport 1a0089053443 (Jakob Linke) #65764
• [8910f7914a] - deps: V8: backport c9c0abfa51f0 (Jakob Linke) #65764
• [e7fd388424] - deps: V8: backport ebd15783b7ba (Marja Hölttä) #65764
• [82715158b8] - deps: V8: backport f3d4d458fe59 (Olivier Flückiger) #65702
• [7003159885] - diagnostics_channel: lazily create tracing context (Romain Lanz) #65513
• [a97def782f] - doc: clarify node:bench significance policy (James M Snell) #65631
• [c74091647d] - doc: clarify isolation modes for node:bench (James M Snell) #65631
• [3ef81a676c] - doc: clarify measurement integrity details of node:bench (James M Snell) #65631
• [6b565d7b2c] - doc: clarify security triage dispositions and permission boundaries (Rafael Gonzaga) #65436
• [724981287c] - (SEMVER-MINOR) doc: move histogram.burnRate to correct location in doc (James M Snell) #65434
• [f8b627c09b] - doc: fix default limit of maxHeadersCount (Aryn H) #65472
• [aa3d94fc1d] - doc: fix return types for sync methods (Chiang Fong Lee) #58575
• [fe9f452ddd] - doc: document REPL DEP0185 throws and uncaught-exception behavior (Adrián Estrada) #64993
• [6b84ee66fa] - errors: validate constructor name (Christian Aurich) #65607
• [ed1b629901] - events: fix weak listener retention overwrite (Aryan) #64024
• [7b4c17f723] - ffi: throw on missing memory helper arguments (Soul Lee) #65500
• [cf78d4260e] - ffi: include SharedArrayBuffer in error message (Donghoon Kang) #65735
• [2d2f4f6d1a] - (SEMVER-MINOR) ffi: enable module by default (Matteo Collina) #65475
• [bdcb6def4e] - ffi: validate DynamicLibrary getter receivers (Trivikram Kamat) #65415
• [5d24a8fe37] - fs: copy directory trees for fs.cp() on the thread pool (Shelley Vohr) #65488
• [40bdf32d91] - fs: give directories created by cpSync the source directory's mode (Shelley Vohr) #65488
• [6ac1bc040f] - fs: write files in one thread pool round trip (Shelley Vohr) #65489
• [b4b89c08c1] - fs: handle recursive watch setup races (Filip Skokan) #65699
• [54a1311d9e] - fs: apply nocase to literal glob exclude patterns (Yusuke Hayashi) #64817
• [2130460831] - fs: improve performance of recursive directory read (Aviv Keller) #65524
• [ab7f4c88b7] - fs: do not descend into symlinks for ** unless following symlinks (RafaelGSS) #65435
• [e990324e7a] - fs: watch directories, not files, in recursive fs.watch fallback (Shelley Vohr) #65486
• [b6db21972a] - fs: preserve directory timestamps in cp (Abhinandan Kumar) #65540
• [d418ca140e] - fs: fix recursive watch error handling (Filip Skokan) #65635
• [ea372bf9c9] - fs: cancel in-flight stat on abort (Mert Can Altin) #63142
• [458664073e] - fs: fix rmSync error messages for non-ASCII paths (Yeaseen) #61233
• [34b38235c3] - fs: add maxDepth option to glob (Alexander Lichter) #64003
• [e3cc0d9313] - http: fast-forward teardown of unread messages (Matteo Collina) #65732
• [f9175a212c] - http: coalesce chunked writes during auto-corking (GetThatCookie) #64987
• [b4a7cd3efb] - http2: fix write deadlock exposed by larger window sizes (Tim Perry) #65440
• [b7e97f6cfd] - http2: error for incomplete reads on RST, auto-drain, deprecate aborted (Tim Perry) #63249
• [d62989dbdf] - http2: fix async context loss when trailers carry END_STREAM (Orgad Shaneh) #63814
• [8aba314f87] - https: limit proxy CONNECT response headers (Matteo Collina) #64545
• [bea74e1cb5] - lib: put node:bench behind an --experimental-bench flag (James M Snell) #65920
• [2835523960] - lib: fixup node:bench handling of --require option (James M Snell) #65631
• [aae83d87a4] - lib: improve diagnostic message support (James M Snell) #65631
• [ba7baed423] - lib: have runFile honor permissions and accept URL/Buffer paths (James M Snell) #65631
• [55103db988] - lib: add runFile api to node:bench (James M Snell) #65631
• [0a4c50eb76] - lib: add context.diagnostic api to node:bench (James M Snell) #65631
• [476e25e864] - lib: add bench:plan event to node:bench (James M Snell) #65631
• [67cf0e556f] - lib: clarify mean in node:bench docs (James M Snell) #65631
• [f85f72ad42] - lib: improve node:bench stream handling (James M Snell) #65631
• [b32b09f56b] - lib: add runId, fileRunId, entryFile, namePath to node:bench (James M Snell) #65631
• [4b9b53f958] - (SEMVER-MINOR) lib: add node:bench explicit createRunner (James M Snell) #65606
• [d9f18171f0] - (SEMVER-MINOR) lib: complete the implementation of node:bench and cli (James M Snell) #65606
• [c39e20e9ca] - (SEMVER-MINOR) lib: implement bench/reporters (James M Snell) #65606
• [657415c6df] - (SEMVER-MINOR) lib: implement node:bench (James M Snell) #65606
• [46863a7f9c] - lib: use Float16Array from primordials (Antoine du Hamel) #65702
• [cbd0948138] - lib: defer source map payload decoding until first use (Shelley Vohr) #65490
• [1ddb1c8934] - lib: optimize async context frame activation (Tim Perry) #65519
• [02f6feef7e] - lib: use validateArray for array arguments (JunHwan Choi) #65344
• [962795ab8c] - lib: apply minor dtls cleanups (James M Snell) #63539
• [c07b2ab8a9] - lib,benchmark: address multiple review issues (James M Snell) #65631
• [54a5e25f72] - module: derive builtinModules from enabled builtin set (Jungwon Sohn) #65418
• [c93a90cf12] - net: fix BlockList.fromJSON for IPv4-mapped IPv6 rules (Daijiro Wachi) #64125
• [506d23b76f] - net: recognize bare IPv6 loopback addresses in isLoopback (Daijiro Wachi) #63619
• [81cd6d7b78] - net: improve dtls cert verification (James M Snell) #64314
• [51d094e26b] - node-api: make object property arrays const (Yilong Li) #65621
• [875c7ecee2] - node-api: enter env context for async callbacks (Shelley Vohr) #65406
• [ebcfec2f0c] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #65606
• [09b333bcc5] - perf_hooks: add missing resource timing attributes (greenhead) #65017
• [e1913630c3] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #65434
• [67a78317dd] - permission: do not enforce fs and addons in audit mode (Issac) #65659
• [19e69e5f72] - permission: support URL and Uint8Array as has()/drop() reference (Seungmin Nam) #65492
• [168af4d8d7] - permission: block FileHandle fsync and fdatasync (Rafael Gonzaga) #65431
• [855fff682f] - quic: stop guarding ngtcp2_recv_stop_sending callback field (René) #65688
• [d30df2a3e1] - quic: reuse TLS pause machinery to drop event deferral & improve 0RTT (Tim Perry) #65522
• [fce1b6a482] - quic: remove unused fin flag from blob reader wakeup (trivenay) #65315
• [c721aabfb7] - quic: apply multiple fixes to flow control signaling (James M Snell) #65309
• [2c552cd32c] - quic: release stream arenas before cleanup (Trivikram Kamat) #65410
• [487662717b] - sea: mount bundled assets as a virtual file system (Matteo Collina) #65675
• [0ec15a2a54] - sea: keep ELF segments on separate pages in --build-sea output (Shelley Vohr) #65564
• [1627fd6561] - sqlite: re-validate database state after reading options (Trevor Burnham) #65595
• [18c3867d19] - sqlite: run backup completion in callback scope (Filip Skokan) #65666
• [a77d738683] - sqlite: copy changeset before applying it (Matteo Collina) #65286
• [b5f0558c84] - sqlite: reject closing a session from a callback (Trevor Burnham) #65454
• [5f95032859] - sqlite: keep sessions alive across SQLite callbacks (Trevor Burnham) #65465
• [2ce0e2eb10] - sqlite: throw on disposal of an in-use session (Guilherme Araújo) #65449
• [f66ed89136] - src: fix use-after-free in CleanupHookThunkRun (Caleb Everett) #65630
• [14613fdc3e] - (SEMVER-MINOR) src: fixup histogram and options linting issues (James M Snell) #65606
• [6db3f662cf] - src: fix startup snapshot reproducibility of InternalFieldInfo (Chengzhong Wu) #65684
• [8e9151c9f2] - (SEMVER-MINOR) src: let embedders supply a builtin code cache without a snapshot (Shelley Vohr) #65352
• [760337aa5b] - src: fix live lock between environments with blocked requests (Ilyas Shabi) #65520
• [f2a588c385] - src: apply IsolateSettings when using a snapshot (Shelley Vohr) #65407
• [2fd50ae915] - src: add re-entrancy guard to TriggerUncaughtException (Temuulen Undrakhbayar) #64327
• [e260fd146c] - src: reuse cached strings in CompileSerializeMain (agape1225) #65453
• [0650dca863] - src: add missing vector include (Filip Skokan) #65622
• [6e9d44d1fe] - src: disable V8 external memory reasonable size check (Paul Bouchon) #65589
• [9c46e56303] - src: report libuv error when openAsBlob cannot stat (Paul Bouchon) #65517
• [a0aaff6b07] - src: list scripts when --run has no command (James Ross) #64606
• [469590c155] - src: fixup manual new/delete usages (James M Snell) #65348
• [5902acf031] - src: make the options structs smaller with packed bits (James M Snell) #65145
• [0c24639a5a] - (SEMVER-MINOR) src, lib: add stats to dtls (James M Snell) #63182
• [652fbc286e] - (SEMVER-MINOR) src,lib: add dtls interop tests (James M Snell) #63182
• [889854f18b] - (SEMVER-MINOR) src,lib: implement experimental DTLS API (James M Snell) #63182
• [76538d519c] - stream: use webidl validation semantics for args (James M Snell) #65658
• [649a4aba93] - stream: ensure that stateful transforms preserve this (James M Snell) #65658
• [23220992c0] - stream: fix nested async flushing with infinite sources (James M Snell) #65658
• [3ad1338139] - stream: ensure from() observes returned rejecting promise correctly (James M Snell) #65658
• [cafdee6369] - stream: apply source normalization once at call time (James M Snell) #65658
• [edb83cb620] - stream: make consumer signals on longer alter source precedence (James M Snell) #65658
• [56bdd765df] - stream: make pipeTo source normalization independent of Writer (James M Snell) #65658
• [037c07af2b] - stream: pre-aborted pipeTo now applies dest failure handling (James M Snell) #65658
• [7308492d48] - stream: ensure pre-existing writes drain before EOF and end() waits (James M Snell) #65658
• [756773477b] - stream: ensure async dispoal after endSync awaits for drain (James M Snell) #65658
• [042b951312] - stream: ensure factory signals remain active through closing (James M Snell) #65658
• [2dc09ca9ca] - stream: canWrite and ondrain now reflect physical capacity (James M Snell) #65658
• [9192fbb6dd] - stream: skip unobserved 'readable' emission at EOF (Matteo Collina) #65749
• [dc25a61e7a] - stream: avoid per-chunk promises in webstream adapters (Matteo Collina) #65548
• [82ae196af6] - stream: address stream/iter review feedback (James M Snell) #65652
• [3b37b48592] - stream: replace object sentinel with symbol (James M Snell) #65652
• [b6424b6612] - stream: ensure pipeToSync requires synchronous close (James M Snell) #65652
• [830fc81acf] - stream: cancel active stream/iter pulls (James M Snell) #65652
• [30606908de] - stream: fix merge settlement tagging and falsy error tracking (James M Snell) #65652
• [7319198755] - stream: ensure full-close semantics when closed (James M Snell) #65652
• [bf5acb783f] - stream: defend against re-entrancy in writev (James M Snell) #65652
• [b01594f93a] - stream: ensure stability of stored metadata (James M Snell) #65652
• [7bfd81ab09] - stream: fixup writer to terminate on consumer return/throw (James M Snell) #65652
• [dc2483c38d] - stream: ensure iterator cleanup on done, reject, etc (James M Snell) #65652
• [f6fac6f7f0] - stream: fixup cancelation handling in pull() (James M Snell) #65652
• [dfe0617e71] - stream: fix early drain after Utf8Stream reopen (Matteo Collina) #65633
• [900fae0a24] - test: split test-bench-cli to try deflaking it (James M Snell) #65919
• [31f4bd73b2] - test: make node:bench test samples survive a coarse clock (Shelley Vohr) #65780
• [e0fa1893c3] - test: do not dump core in external memory limit test (Shelley Vohr) #65780
• [00ad283b8d] - test: zero-fill buffers before the string length limit check (Christian Aurich) #65755
• [70763fcc46] - test: expand test coverage of node:bench (James M Snell) #65631
• [5a38e6b115] - (SEMVER-MINOR) test: fix node:bench test timing (James M Snell) #65606
• [536ae0e24b] - (SEMVER-MINOR) test: improve node:bench test coverage (James M Snell) #65606
• [eec66d529c] - (SEMVER-MINOR) test: update bench tests to not fail on no-crypto (James M Snell) #65606
• [ce7b349de5] - test: bump WPT webidl and interfaces (Filip Skokan) #65679
• [ec96f8dc23] - test: update WPT for url to c23755a144 (Node.js GitHub Bot) #65651
• [ebe2ac248b] - test: fix recursive fs.watch error fixture (Filip Skokan) #65683
• [a19912ee8f] - test: update streams WPT (Jeong SeokChan) #65638
• [14b5dfc63d] - test: remove console.log call in node_run_list (Antoine du Hamel) #65572
• [3f67df139c] - test: expect node:ffi to be enabled by default (Matteo Collina) #65636
• [b9ee2e67bf] - (SEMVER-MINOR) test: use native builder for legacy SEA tests (Filip Skokan) #65553
• [53a29d0894] - test: use common spawnSync helpers in more tests (greenhead) #65552
• [5c680a50f4] - test: add coverage for removeEventListener boolean capture (Lazizbek Ergashev) #65245
• [6f99474912] - test: deflake fastutf8stream destroy and reopen tests (Christian Aurich) #65554
• [2342b2bf30] - test: cover Readable.from() sync iterator errors (jakecastelli) #65515
• [1e455a4ffe] - test: support inspecting WPTs in child processes (Filip Skokan) #65510
• [1f7cab588e] - test: document WPT runner workflows (Filip Skokan) #65510
• [d39a902cec] - test: simplify test-worker-heap-profile.js (Donghoon Kang) #65372
• [90d1b863f7] - test: keep WPT backend checks alive (Filip Skokan) #65320
• [be60c34b52] - (SEMVER-MINOR) test: enable multi-global WPTs (Filip Skokan) #64894
• [d04cfcda8e] - (SEMVER-MINOR) test: add opt-in process WPT runner (Filip Skokan) #64894
• [715c21f805] - (SEMVER-MINOR) test: accomodate multi-global tests in WPT{Runner,TestSpec,Report} (Filip Skokan) #64894
• [9aa8489a01] - test: fix lint in dtls tests (Matteo Collina) #64902
• [6a3d8a6d9f] - tls: read the peer certificate chain without consuming it (Tony Gies) #65602
• [2e519f8fef] - tls,quic: commonize TLS cert handling between tls, dtls & quic (Tim Perry) #64711
• [2266c14051] - tools: add GHA workflow to test vendored Perfetto (Antoine du Hamel) #65614
• [19779f121f] - tools: fix the list of globals in ESLint config files (Antoine du Hamel) #65281
• [b57db8dfd3] - typings: add types for performance binding (Jungwon Sohn) #65574
• [371e2260f4] - typings: add encodeIntoResults to EncodingBinding (greenhead) #65350
• [417cdd8a77] - typings: add typing for permission binding (Seungmin Nam) #65385
• [a82cc7097f] - url: align URLPatternInit dictionary conversion with WebIDL (Piyush Yadav) #65498
• [0e8f7b96b0] - util: canonicalize namespaced tags in inspect() (René) #63257
• [acd2bb10ce] - v8: add setHeapProfileNearHeapLimit (Ilyas Shabi) #64676
• [d0535b1041] - vfs: load native addons from a mounted file system (Philipp Dunkel) #65680
• [ea6f70ba41] - vfs: fix rename over non-empty directory (Christian Aurich) #65613
• [b4f6b3798a] - vfs: add ZipProvider (Philipp Dunkel) #64915
• [5198142c59] - (SEMVER-MINOR) vfs: integrate with CJS and ESM module loaders (Matteo Collina) #63653
• [38192126e2] - worker: start worker threads from the built-in snapshot (Shelley Vohr) #65336
• [56144ea80a] - worker: add ref/unref to web workers (Aviv Keller) #65507
• [7231c13b8a] - (SEMVER-MINOR) worker: add wpt tests for Web Workers (Aviv Keller) #64894
• [5af9d72e7f] - (SEMVER-MINOR) worker: add support for Web Workers (Aviv Keller) #64894
• [069a1b1200] - zlib: avoid waiting for paused ZIP iterators (Trivikram Kamat) #65278

• Queued messages can now be sent into the running turn with Enter. While the agent is working, pressing Enter with an empty composer steers the first message in the queue, so it is picked up at the next turn boundary instead of waiting for the whole task to finish; the composer placeholder says so whenever the queue is non-empty. The queue head is claimed atomically, so a fast second Enter can't steer a message that has already left the queue, and a steer that fails now surfaces as a toast rather than silently doing nothing
• The macOS Dock icon now has the standard margin other apps use. The bundled icon and the selectable runtime icons (Classic, Chip, Hologram, Midnight) were edge-to-edge, so Cline rendered visibly larger than its neighbours in the Dock. Windows keeps its existing artwork
• The session sidebar's sort toggle now shows the mode a click switches to, not the one already active — a folder icon while sorted by time, a clock while grouped by project

Full Changelog: desktop-v0.0.28...desktop-v0.0.29

release: v2.0.5

https://code.visualstudio.com/updates/v1_138

release: v2.0.4

What's Changed

• fix(core): ensure AgentLoopContext properties are preserved across object spread by @diegogodinezr in #29335
• fix(a2a-server): add early return on unsupported store in tasks metadata endpoint by @jesussamuel-byte in #29334
• Changelog for v0.61.0-preview.0 by @gemini-cli-robot in #29344
• Changelog for v0.60.0 by @gemini-cli-robot in #29345
• fix(core,acp): format MCP tool call titles as structured signatures and segregate explanations by @jvargassanchez-dot in #29341
• chore(release): bump version to 0.62.0-nightly.20260915.gae28844fb by @gemini-cli-robot in #29346

Full Changelog: v0.61.0-nightly.20260915.g9c1b0a610...v0.62.0-nightly.20260916.g6a466a7e2

Matomo 5.14.0-rc1 (Pre-release)

We recommend to read this FAQ before using a pre-release in a production environment.

Please use the attached archives for installing or updating Matomo.
The source code download is only meant for developers and will require extra work to install it.

• Latest stable production release can be found at https://matomo.org/download/ (learn more) (recommended)
• Beta and Release Candidate releases can be found at https://builds.matomo.org/ (learn more)

v35.0.0

What's Changed

• llama.cpp updates

Full Changelog: v0.34.1...v0.34.2-rc0

What's Changed

• Changelog for v0.60.0-preview.0 by @gemini-cli-robot in #29251
• chore(release): bump version to 0.61.0-nightly.20260908.gc647533d6 by @gemini-cli-robot in #29254
• Changelog for v0.59.0 by @gemini-cli-robot in #29253
• fix(core): preserve explicit versioned Flash model IDs by @SandyTao520 in #29252
• fix(core): prevent indirect prompt injection via build file modifications and untrusted flags by @villahernandez-coder in #29250
• fix(sandbox): harden filesystem boundaries and isolate runtime state by @diegogodinezr in #29214
• fix(core): ensure AgentLoopContext properties are preserved across object spread by @diegogodinezr in #29335

New Contributors

• @villahernandez-coder made their first contribution in #29250

Full Changelog: v0.60.0-preview.0...v0.61.0-preview.0

What's Changed

• fix(core): improve destination validation and connection routing in web fetch utilities by @diegogodinezr in #29120
• fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by @jvargassanchez-dot in #29117
• chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by @gemini-cli-robot in #29162
• Changelog for v0.58.0 by @gemini-cli-robot in #29161
• fix(cli): isolate temporary directory for macOS Seatbelt sandbox by @jvargassanchez-dot in #29171
• feat(extensions): harden path resolution and boundary validation in extension loader by @diegogodinezr in #29169
• Changelog for v0.59.0-preview.0 by @gemini-cli-robot in #29159
• fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp by @amelidev in #29158
• fix(extensions): prompt for consent on environment changes and sanitize runtime-altering environment variables by @amelidev in #28863
• fix(core): enhance workspace path boundary checks and symlink resolution in command safety and file discovery by @jesussamuel-byte in #29170
• fix(config): enforce strict permission and ownership checks on system-wide configuration paths by @jesussamuel-byte in #29115
• fix(core): mitigate NTFS 8.3 short name (SFN) path by @urielefrenvirtusa in #29116
• fix(cli): isolate settings directory in sandbox containers by @jvargassanchez-dot in #29216
• fix(core): enforce envelope metadata provenance for untrusted tool outputs by @luisfelipe-alt in #29215

New Contributors

• @urielefrenvirtusa made their first contribution in #29116

Full Changelog: v0.59.0...v0.60.0

Drop support for creating new models with typical_p parameters, while
retaining support for existing GGUF models with the setting.

Downloads: https://elastic.co/downloads/elasticsearch
Release notes: https://www.elastic.co/docs/release-notes/elasticsearch#elasticsearch-9.5.4-release-notes

Downloads: https://elastic.co/downloads/elasticsearch
Release notes: https://www.elastic.co/docs/release-notes/elasticsearch#elasticsearch-9.4.7-release-notes

React Server Components

• Type hardening and performance improvements
  (#36425 by @eps1lon and @unstubbable)

React Server Components

• Type hardening and performance improvements
  (#36425 by @eps1lon and @unstubbable)

React Server Components

• Type hardening and performance improvements
  (#36425 by @eps1lon and @unstubbable)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.0.6
  (#36568 by @unstubbable)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.1.7
  (#36567 by @unstubbable)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6
  (#36566 by @unstubbable)

docs: refresh getting started guides (#18450)

Matomo 5.14.0-alpha.20260915180530 (Pre-release)

We recommend to read this FAQ before using a pre-release in a production environment.

Please use the attached archives for installing or updating Matomo.
The source code download is only meant for developers and will require extra work to install it.

• Latest stable production release can be found at https://matomo.org/download/ (learn more) (recommended)
• Beta and Release Candidate releases can be found at https://builds.matomo.org/ (learn more)

This feature release adds scheduled maintenance, selective automatic updates, full portable support, expanded shortcut management, and major reliability improvements across package managers and remote operations.

New Features

• Added scheduled maintenance for update checks, automatic update installation, local backups, and cloud backups, with independent schedules, retries and timeouts.
• Added support for marking individual packages for automatic updates instead of automatically updating every package.
• Added Start Menu shortcut and folder management to the unified Manage shortcuts window, including removal, reset, relocation, post-install prompts, and command-line support.
• Added an optional Installer host column that shows each download domain and provides the full installer URL in a tooltip.
• Added configurable retention limits for timestamped local backups, with automatic removal of the oldest files.
• Added the %NAME% placeholder and a per-package subfolder style setting for creating sanitized custom installation directories.
• Added Update and Update as administrator actions to the Installed Packages page when a newer package version is available.
• Added a responsive package toolbar that moves actions into an overflow menu when the window is too narrow to display them all.
• Added warnings when an installed package version cannot be reliably verified, with explanatory tooltips in package lists and details.

Improvements

• Improved package icon loading with bounded preloading and automatic retries after temporary failures.
• Improved update error messages for unavailable installers, already-current packages, and WinGet hash mismatches, including more relevant recovery guidance.
• Improved Linux compatibility by targeting a glibc 2.27 baseline so releases run on considerably older distributions.
• Migrated supported NuGet-backed package managers to the NuGet V3 API for more efficient and reliable feed access.

Bug Fixes

• Fixed WinGet package detection, search, and update checks on Windows installations using non-English display languages.
• Fixed WinGet detection when its executable is not available through the system path by locating App Installer through Windows.
• Fixed updates being under-reported during the first scan by refreshing the WinGet catalog snapshot when its source index changes.
• Fixed version comparisons for packages that use underscores in build revisions, including Homebrew versions such as 18.4_1.
• Fixed PowerShell 5.x module operations incorrectly reporting success after non-terminating errors.
• Fixed Cargo package listings showing blank crate names or silently omitting entries.
• Fixed Scoop package listings hanging when commands produced excessive error output or stopped responding.
• Fixed shortcut removal failures by elevating when required and applying deletions as a single operation.
• Fixed package-manager dependency installations being accepted without verifying that the required tool was actually installed.
• Fixed Cargo-installed dependencies being missed when they were available in standard Cargo directories but not on the system path.

Security

• Hardened PowerShell-based package operations against command injection by validating package values, rejecting shell metacharacters, and passing arguments as data.
• Hardened settings imports by rejecting unknown or unsafe names and preventing secure-settings paths from escaping their intended directory.

Thank you to everyone who reported issues and contributed improvements to the project.

Full Changelog: v2026.2.7...v2026.3.0

What's Changed

• docs: announce Linux PGP key rotation by @babakks in #14340
• Require verified SHAs in issue-triage permalinks by @sergiou87 in #14343
• Add clipboard preference for auth flows and default to enabled by @williammartin in #14345
• Add VHS demo skill by @williammartin in #14334
• Use API SSH URLs for repository clones by @williammartin in #14346
• docs: fix broken "GitHub language" link in primer foundations by @areesh-ali in #14363
• Fix and validate Go bump workflow by @williammartin in #14347
• chore: sign Linux repositories only with the new PGP key by @babakks in #14197
• Rewrite CLI agent guidance by @williammartin in #14388
• Prepare exit errors for Go 1.27 by @williammartin in #14397
• Reduce rate limiting and reduce time taken for acceptance tests by @williammartin in #14320
• Validate repository names during interactive creation by @sergiou87 in #14313
• Filter acceptance tests for installation token capabilities by @williammartin in #14354
• Record attachment operation counts in telemetry by @BagToad in #14360
• Finalize telemetry at invocation completion by @williammartin in #14390
• Propagate gh path to extensions by @williammartin in #14282
• Fix Go bump workflow authentication by @williammartin in #14412
• Run acceptance tests in Actions with a GitHub App token by @williammartin in #14356
• Fix acceptance script paths on Windows by @williammartin in #14414
• Wait for repository readiness before archiving by @williammartin in #14415
• chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by @dependabot[bot] in #14376
• chore(deps): bump github.com/google/go-containerregistry from 0.22.0 to 0.22.1 by @dependabot[bot] in #14377
• chore(deps): bump github.com/yuin/goldmark from 1.8.5 to 1.8.6 by @dependabot[bot] in #14378
• chore(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 by @dependabot[bot] in #14391
• chore(deps): bump github.com/microsoft/dev-tunnels from 0.1.27 to 0.2.0 by @dependabot[bot] in #14375
• chore(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 by @dependabot[bot] in #14417
• Delete repo garden command by @williammartin in #14416
• Update Go bump validation tools by @williammartin in #14428
• Fix remote branch deletion for owner case mismatch by @williammartin in #14429
• Retire multi-account migration by @williammartin in #14430
• Recognize maintainer authorization by @williammartin in #14438
• Safely replace stale Go bump branches by @williammartin in #14441
• Bump Go to 1.27.1 by @github-actions[bot] in #14442
• Use internal Apple codesign action by @williammartin in #14437
• chore(deps): bump azure/login from 3.0.2 to 3.1.0 by @dependabot[bot] in #14447
• chore(deps): bump the codeql-actions group with 3 updates by @dependabot[bot] in #14446
• chore(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 by @dependabot[bot] in #14445
• chore(deps): bump golang.org/x/text from 0.41.0 to 0.42.0 by @dependabot[bot] in #14444
• chore(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0 by @dependabot[bot] in #14443
• Test explicit default repository resolution by @williammartin in #14460
• Bump github.com/cli/go-gh/v2 to v2.16.1 by @niik in #14461
• Revert "Use internal Apple codesign action" by @williammartin in #14462

New Contributors

• @areesh-ali made their first contribution in #14363

Full Changelog: v2.100.0...v2.101.0

This preview includes the latest features, fixes, and improvements since PowerToys Preview v0.101.2522.0.

Installer Hashes

Highlights

• Mouse Utilities: Added Auto Hide Cursor, with independent keyboard-input and pointer-inactivity triggers.
• Keyboard Manager: Added DSC v3 profile deployment for key and shortcut remappings.
• Power Display: Added drag-and-drop and menu controls for reordering saved profiles.
• Quick Accent: Fixed the toolbar remaining stuck after focus leaves the active window.
• Advanced Paste: Fixed crashes with HTML-only clipboard content.
• Settings: Added smooth animations to the update activity banner.

Advanced Paste

• Fixed crashes with HTML-only clipboard content while expanding deterministic offline UI coverage in #50504

Command Palette

• Improved stability by consistently dispatching MainWindow UI messages and session updates on the UI thread in #50392 by @jiripolasek

Keyboard Manager

• Added a DSC v3 resource for deploying key and shortcut remapping profiles through dsc.exe and WinGet Configuration in #49427 by @Gijsreyn

Mouse Utilities

• Added an optional Auto Hide Cursor utility that hides the pointer after keyboard input or inactivity and restores it on genuine mouse input in #50271 by @DamianEdwards

Mouse Without Borders

• Improved Settings reconnection handling by validating each local caller while preserving normal Settings and pairing behavior in #50480

Power Display

• Added drag-and-drop and menu controls for reordering saved profiles while preserving stable profile identities in #50453
• Reduced settings writes and module notifications by persisting only monitor preferences edited in Settings in #50510

Quick Accent

• Fixed the toolbar so it hides when focus leaves the active window, preventing it from remaining stuck on screen in #50212 by @amail80

Settings

• Added smooth show and dismiss animations to the update activity banner in #50375

Development

• Expanded Keyboard Manager UI coverage for remapping search, modifier and application filters, no-results recovery, and bulk deletion in #50352 by @MasaYan24
• Expanded New+ end-to-end UI coverage across Settings and Windows 10 and 11 File Explorer context-menu workflows in #50534

The ext-sdk-bundle-rollout flag reached 100%, so stable releases now ship a
standalone build of main through ext-vscode-publish-stable.yml rather than the
combined legacy+next A/B VSIX. Rewrite the skill around that path and record
what is left to retire.

Also corrects two things the old text got wrong: nightly is manual-dispatch
only (the cron was removed because PublishNightly gained required reviewers,
so unattended runs sat waiting and starved their successors), and the stable
workflow tags before it builds, so a tag-push failure fails early rather than
leaving a published-but-untagged release.

@cline/shared@0.0.83

@cline/llms@0.0.83

@cline/agents@0.0.83

@cline/core@0.0.83

• Hub-managed Agent Plugins. Packages under ~/.agents/plugins/* on the hub host are discovered and validated from their root plugin.json; valid skills under skills/ are exposed through the skills tool as plugin-name:skill-name, and stdio, Streamable HTTP, and legacy SSE servers from mcp.json are started without touching cline_mcp_settings.json. Workspace .agents/plugins directories are deliberately not scanned, so opening a repo cannot implicitly start repo-controlled MCP servers; extra roots require an explicit agentPluginPaths. Enablement lives in hub settings keyed by manifest name and publishes settings.changed, so clients no longer need their own loader or enablement store. Two bugs fixed along the way: settings.toggle({type: "skills"}) wrote a disabled key into a plugin skill's SKILL.md frontmatter, which the strict Agent Skills parser then rejected so the skill silently vanished until hand-edited; and InMemoryMcpManager.dispose() aborted on the first disconnect() rejection, leaking every remaining server's process
• A model turn that dies mid-stream with a transient provider error is now retried up to 3 times with exponential backoff instead of failing the whole run — a single forwarded 429 previously aborted the run outright. Retryability is read from the AI SDK's typed signals, and a turn is never retried once it has streamed any text, reasoning, media, or tool call, so nothing is duplicated. Model calls also now allow 5 SDK-level retries for request-start 429/5xx/network failures, up from 2
• Streaming is no longer throttled by hook forwarding. The hub proxied every runtime event to client-contributed onEvent hooks as a capability round trip carrying the full session snapshot, with the agent loop awaiting it — so each streamed token cost a few hundred KB of serialization, a persisted row, and a blocking IPC hop. Per-chunk text, reasoning, and tool-update deltas are no longer forwarded to remote onEvent hooks; every other event still reaches hooks unchanged. The hub event log also moved to synchronous = NORMAL, dropping one fsync per appended delta
• Checkpoints no longer re-hash unchanged untracked files on every turn. Each turn built a throwaway git index, so git re-read every untracked file before each model call — with multi-GB untracked data in the workspace this blocked every message for seconds to minutes. A persistent per-session snapshot index lets git's stat cache skip unchanged files, so from the second turn a snapshot costs about one git process. Snapshot contents are byte-identical to before. A corrupt index now heals with one rebuild-and-retry that also clears a stale index.lock, where previously a git process killed mid-add degraded that session to HEAD-only checkpoints permanently
• run_commands no longer hangs when a command backgrounds a child. The executor settled on the child's close event, which waits for the stdio pipes to drain; a backgrounded process (cmd &, nohup) holds the inherited write-ends open, so a finished command hung until the timeout killed the whole process tree. It now also settles on exit after a one-second grace period, reporting the exit code and the output collected so far
• apply_patch "Add File" against a path that already exists is now rejected instead of silently overwriting it. Only UPDATE and DELETE targets were pre-loaded, so the parser's "File already exists" guard never saw ADD targets and the patch destroyed the file's contents with no error and no diff of what was lost
• Nested PowerShell invocations are now unwrapped instead of being double-parsed. Command text is fed to PowerShell through a stdin bootstrap that the outer shell parses as PowerShell source, so a command written as powershell -Command "... $_ ..." had its argument interpolated before the nested shell ran — pipelines using $_ emitted one error per enumerated item, an error flood that looked like a hang, while the child still exited 0. Unwrapping is applied only when it is semantics-preserving: same PowerShell edition, -NoProfile, and an entirely quoted -Command tail; everything else passes through byte-identical
• The run_commands tool description now names the actual PowerShell edition in use — Windows PowerShell (powershell.exe) versus PowerShell (pwsh.exe) or PowerShell (pwsh) — quotes its guidance against the resolved executable, and tells the model to write commands directly rather than wrapping them in another -Command or /c invocation. It also no longer claims "in Windows environment" when pwsh is the configured shell on macOS or Linux
• No file index is built when the workspace root is the home directory or a filesystem root. Running from $HOME and typing an @ mention listed every file under home and re-ranked the whole index on each keystroke, driving the process to many GB of RSS until it was OOM-killed. Paths are canonicalized first so symlinked or differently-cased spellings still hit the guard
• Credential fields are now stripped of Unicode control and format characters and surrounding whitespace before being saved. A key pasted with an invisible character (BOM, zero-width space, bidi mark) was stored corrupted and the provider returned a 401 indistinguishable from a genuinely wrong key, while masked rendering hid the corruption
• The editor tool's error for a null old_text now names the file, says whether the parameter was null or omitted, and spells out the recovery. Models that fill optional parameters with null hit a terse "required" message and re-sent the identical call until the loop detector hard-stopped the run
• Provider-native web search is now enabled by default in non-yolo sessions on supported provider/model combinations, instead of requiring tools.web_search.enabled = true. An explicit false still opts out, and the settings loader fails closed: web search stays disabled when a global settings file exists but cannot be read or parsed
• Session history no longer hides root sessions behind their children. The list over-fetched a fixed window of rows and filtered out subagent and team-task children client-side; since children sort after the root that spawned them, one session with more children than the window hid itself and every older root. Listing now widens until the requested page fills, and the backends filter child rows in SQL
• Schedules no longer stall each other. The cron runner awaited the whole claimed batch, so one long agent turn blocked dispatch of every other schedule; dispatch is now decoupled from execution, and per-schedule and global parallelism are enforced inside the SQLite claim transaction so multiple connections cannot exceed a schedule's limit. Locally active claims are renewed each tick, so work resumed after system sleep is not reclaimed and started twice, and terminal status is written before the markdown report so a failed report write cannot replay a completed turn
• Recurring schedules created without a timezone now persist the host's local IANA timezone rather than an implicit default, and the scheduling tool prompts tell the model to omit the timezone instead of guessing
• Automation event acceptance is now atomic. The event log row was committed before specs were matched and runs materialized, so a failure mid-fan-out left the event permanently deduplicated and impossible to redeliver, and other connections could observe partially materialized runs. Acceptance now runs in one write transaction, and failures roll back and propagate to the caller for redelivery
• New RemoteEnvironmentService runs sessions on an SSH host while the client stays local. connect() inspects the remote host, uploads a self-contained helper binary to ~/.cline/remote/, starts a loopback-bound Hub there, and opens an SSH tunnel to it; the returned endpoint and token are passed to ClineCore.create({ backendMode: "remote" }), after which tools, sessions, and persistence all execute remotely. SSH runs with BatchMode=yes and StrictHostKeyChecking=yes, so the host key must already be known and password authentication is not supported; profiles are stored at mode 0600 and hold identity-file paths only, never secrets. Remote targets are Linux and macOS on x64/arm64, and embedders must supply a helper binary cross-compiled for the target. This is an SDK building block — no CLI command or desktop UI is wired to it yet, and it is inert unless an embedder constructs the service
• A session started without an explicit systemPrompt now gets a default Cline prompt built on the execution host, rather than running with none. Callers that pass their own prompt are unaffected
• Hub daemons can now be started with connector management disabled, so an SSH-spawned Hub does not adopt or restart the account's Slack and Telegram connectors. Locally started hubs are unaffected
• Hub clients can now authenticate a remote connection with HTTP headers via a resolveConnectionHeaders() resolver, re-resolved on every reconnect so short-lived credentials can refresh. It is mutually exclusive with the local hub-token subprotocol. NodeHubClient.connect() was also reworked so concurrent calls share one in-flight promise and a stale registration or connect timeout can no longer clobber a newer attempt
• A hub running the same core version as the client no longer prompts to update. Two artifacts of the same release cut from different commits never share a build fingerprint, so anyone with both the desktop app and the CLI installed got a "Cline Hub was updated" dialog on every launch whose "Update and restart" looped on "no app update available". Genuinely different core releases still prompt
• Sessions seeded with history (forks, checkpoint restores) now persist their live idle status instead of defaulting to "running", which left a restored session showing as busy forever
• Sessions imported from Claude Code, Codex, or opencode now summarize the foreign history on first resume rather than replaying tool calls the current agent cannot make. The summary is persisted so it runs once, the canonical transcript is left intact, and a failed attempt falls back to the raw history. Imported sessions also record an import origin that is stamped on their telemetry, and resuming a session no longer overwrites stored import or automation provenance with a default "user" origin
• Session import source directories now resolve correctly on Windows profiles where USERPROFILE disagrees with what Node reports, and honor CLAUDE_CONFIG_DIR, CODEX_HOME, and XDG_DATA_HOME
• Cline Pass and free models now report zero cost. The backend reports upstream market cost on those responses and it was passed straight through, so subscription and free usage showed dollar figures for requests that are not billed per token
• Offline clients now fall back to generated Recommended, Free, and Subscribed model lists built at release time. The fallback was a hand-maintained literal of six models with an empty Cline Pass tier, so when the recommended-models endpoint was unreachable, subscribers got no subscribed tier at all
• Langfuse tracing is now limited to the Cline and Cline Pass providers. The provider argument was ignored, so in Langfuse-configured environments prompts and responses from third-party and BYOK providers were exported too
• OpenCode Go models are now routed to the right wire protocol. One base URL serves several protocols, but every model was sent over the OpenAI chat-completions adapter, so Anthropic-protocol and OpenAI Responses models on that endpoint failed or misbehaved. Requests also now carry the sticky session header and a Cline user agent
• Claude Code and OpenCode are now declared local-auth providers with a named local CLI, so hosts route them to a local-CLI readiness screen instead of demanding an API key they never read — previously the workaround was storing a dummy key, and the desktop app rendered an OAuth button for OpenCode that did nothing
• The OpenAI Codex (ChatGPT subscription) model list no longer gets overwritten with the full OpenAI API catalog by hosts that query provider models, which also lost the Codex context caps. The Codex backend's 400K/272K/128K budget is now clamped onto every Codex model rather than just one, so newer models no longer inherit the API catalog's 1M limits and produce over-long requests and wrong context math. Retired ChatGPT-account models were dropped from eligibility and the default moved to gpt-5.6-terra
• Live model catalogs now refresh for every shared-catalog provider, not just Cline and Cline Pass — other providers' lists were whatever was bundled at build time, so newly published models never appeared without a package update. The catalog fetch and the model-source fetch are both bounded by timeouts, so a hung models endpoint can no longer stall the provider list indefinitely
• Providers are now reported as configured based on the provider their credentials are stored under. Cline Pass signs in as Cline and never writes its own entry, so a new Cline Pass user saw only one configured provider despite one sign-in configuring both. The "(free)" suffix now also applies to free-tier models whose ids come from upstream rather than Cline's own namespace
• @cline/ui gains a shared Switch built on a native checkbox, and SearchCombobox keeps section headers visible while searching and can refresh its options each time it opens. Migrators should note the Switch has no data-state/asChild hooks and tests must read the native checked property rather than aria-checked
• Cline Pass now defaults to a subscribed-tier model. Its provider list mixes subscribed (cline-pass/*) and free models, and the default was simply the first entry in a release-date-ordered list, so it drifted onto whichever free model had shipped most recently — a subscriber who never picked a model was put on the free tier rather than the one they pay for. The default is now restricted to cline-pass/* ids
• Refreshed the model catalog. Adds four providers (Infer by Flow7, Melious, NaN, and Wallaby) and takes the bundled catalog from 5,788 to 6,079 models. This is a wide refresh: the resolved default model changes for 44 providers, most of them landing on DeepSeek V4.1 Flash — among them Hugging Face, Fireworks, Requesty, Nebius, Cortecs, CrossModel, DigitalOcean, Eden AI, and OpenCode Go. Gemini and Vertex now resolve to Gemini 3.8 Flash, GitHub Copilot and Vivgrid to GPT-6 Astra, and NVIDIA to GLM 5.3 Flash. If you use any provider without pinning a model, expect a different default

Full Changelog: sdk/sdk/v0.0.82...sdk/sdk/v0.0.83

• Introducing Cline Desktop: a native app for working with open-weight models, with task import from Claude Code and Codex, scheduled runs, web search and voice input, and a marketplace for plugins, MCP servers, and skills. The CLI now shows a one-time startup notice pointing at cline.bot/desktop. At most one notice appears per launch, and CLINE_DISABLE_CLINE_PASS_NOTICE=1 still suppresses all of them
• Agent Plugins are now managed through the Hub. Packages under ~/.agents/plugins/* are discovered and validated, their skills are exposed through the skills tool as plugin-name:skill-name, and their MCP servers start without touching cline_mcp_settings.json. The config screen lists them separately from Cline Plugins and Space toggles them. Workspace .agents/plugins directories are deliberately not scanned, so opening a repo cannot implicitly start repo-controlled MCP servers
• A model turn that dies mid-stream with a transient provider error is now retried up to 3 times with backoff instead of failing the run — a single forwarded 429 from OpenRouter previously ended the run with exit 1. A turn that already streamed output is never retried, so nothing is duplicated
• Streaming output is no longer throttled by the Hub. Every streamed token was proxied to client hooks as a round trip carrying a full copy of the session, with the agent loop waiting on it
• Checkpoints no longer stall every message in workspaces with large untracked directories. Each turn re-hashed every untracked file before the model call, which on multi-GB workspaces blocked messages for seconds to minutes; a persistent per-session snapshot index now lets git skip unchanged files
• Fixed run_commands hanging until timeout after a command that backgrounds a child process. The command had finished, but the backgrounded child held the output pipes open
• Fixed cline being OOM-killed when run from your home directory. Typing an @ mention indexed every file under $HOME and re-ranked it on each keystroke
• Fixed apply_patch silently overwriting an existing file when the model used "Add File" on a path that already exists
• Fixed PowerShell commands that the model wrapped in another powershell -Command "..." being parsed twice, which stripped $_ out of pipelines and produced an error per enumerated item while still reporting success. The tool description now also names which PowerShell edition is in use and tells the model not to wrap commands
• API keys pasted with an invisible character (BOM, zero-width space) are now cleaned before being saved. They were stored corrupted and the provider's 401 was indistinguishable from a wrong key
• Signing in with Claude Code no longer demands an API key it never reads. It authenticates from the claude CLI's own credential store, but onboarding treated it as an API-key provider and dropped you into the sign-in wizard; the workaround was storing a dummy key. A missing claude on PATH now warns instead of blocking, since a configured path, bundled binary, or npx also works. OpenCode gets the same local-CLI treatment
• Web search is now on by default in non-yolo sessions on models that support it
• A running Hub on the same core version as your CLI no longer prompts you to update it. Anyone with both the desktop app and the CLI installed saw a "Cline Hub was updated" dialog on every launch that could never resolve
• Scheduled runs no longer stall behind each other — one long turn blocked dispatch of every other schedule. Parallelism limits are now enforced at claim time, work resumed after system sleep is no longer started twice, and a schedule created without a timezone uses your local one instead of an implicit default
• Session history no longer goes blank when a session spawns many subagents. Child rows crowded out the roots, hiding the parent session and everything older
• Fixed TUI toasts being clipped to their first line. The Hub messages that use them are all longer than that, so the keep-Hub reminder never showed the cline hub upgrade command it exists to deliver
• Cline Pass now defaults to a subscribed model instead of a free one. Its model list mixes both tiers and the default was whichever model shipped most recently, so subscribers who never picked a model were put on the free tier
• Cline Pass and free models now show zero cost instead of the upstream market price for requests you are not billed per token for
• Model pickers now fall back to the full Recommended, Free, and Subscribed tiers when the models endpoint is unreachable. Previously the offline fallback was six hardcoded models with no subscribed tier at all
• The OpenAI Codex (ChatGPT subscription) model list no longer includes models the backend rejects, and Codex context limits are applied to every Codex model instead of being inherited from the OpenAI API catalog, which was inflating the context budget and the usage math
• Model lists for all shared-catalog providers now refresh from the live catalog, so newly published models appear without a CLI update, with timeouts so a hung provider endpoint cannot stall the list
• Cline Pass now shows as a configured provider after sign-in — it stores credentials under Cline, so one sign-in configured both but only Cline appeared
• Fixed OpenCode Go serving several wire protocols behind one URL while every model was sent over the OpenAI chat-completions adapter
• Collapsed a nested undici@5.29.0 (CVE-2026-1525) onto 7.x. The earlier remediation's version-scoped override key was silently ignored by Bun, so a vulnerable copy survived
• Refreshed the model catalog. Adds four providers (Infer by Flow7, Melious, NaN, and Wallaby) and takes the bundled catalog from 5,788 to 6,079 models. This is a wide refresh: the resolved default model changes for 44 providers, most of them landing on DeepSeek V4.1 Flash — among them Hugging Face, Fireworks, Requesty, Nebius, Cortecs, CrossModel, DigitalOcean, Eden AI, and OpenCode Go. Gemini and Vertex now resolve to Gemini 3.8 Flash, GitHub Copilot and Vivgrid to GPT-6 Astra, and NVIDIA to GLM 5.3 Flash. If you use any provider without pinning a model, expect a different default

Full Changelog: cli-v3.0.61...cli-v3.0.62

Full Changelog: v0.61.0-nightly.20260914.g9c1b0a610...v0.61.0-nightly.20260915.g9c1b0a610

What's changed

• Bug fixes and reliability improvements

mlx: add mlx patch to docker build context (#18440)

Matomo 5.14.0-alpha.20260914180528 (Pre-release)

We recommend to read this FAQ before using a pre-release in a production environment.

Please use the attached archives for installing or updating Matomo.
The source code download is only meant for developers and will require extra work to install it.

• Latest stable production release can be found at https://matomo.org/download/ (learn more) (recommended)
• Beta and Release Candidate releases can be found at https://builds.matomo.org/ (learn more)

Core

Bugfixes

• Restored ACP session model, effort, mode, and reasoning chunk boundaries when loading, resuming, or forking sessions. (@JacobNWolf)

TUI

Bugfixes

• Show remote config authentication errors during startup and exit with a failure status.

Extensions

Improvements

• Request summarized adaptive thinking for GitHub Copilot models.

Thank you to 4 community contributors:

• @heimoshuiyu:
  • feat(console): add batch workspace block endpoints (#48491)
• @JacobNWolf:
  • fix(acp): restore session options and reasoning boundaries (#48225)
• @R-Taneja:
  • chore(deps): bump @ai-sdk/gateway to 3.0.191 (#48710)
• @MatthewFeroz:
  • fix(ui): add Merge Gateway logo (#42015)

• Small tweaks, bug fixes, and performance enhancements. Thanks for using Signal!

• MLX: version bump

• mlx: support ModelOpt global scales in MoE models

• address comments

• address comments

fix(qa): avoid runtime startup for evidence scripts (#148153)

25.11.0 (2026-09-13)

🎉 Features

• roll to Chrome 153.0.8010.36 (#15443) (947d527)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.10.0 to 25.11.0

Remove stretched resting body builds, preserve the shared SVG aspect ratio, and soften hop deformation around a foot-anchored pivot. Keep visitor odds and remaining seeded traits unchanged.

Co-authored-by: roboclaw-bot 309084314+roboclaw-bot@users.noreply.github.com
Co-authored-by: steipete 58493+steipete@users.noreply.github.com

This patch release, exclusive to the Enterprise offering

Full Changelog: 2026.8.0...2026.8.1

Full Changelog: v0.61.0-nightly.20260913.g9c1b0a610...v0.61.0-nightly.20260914.g9c1b0a610

Full Changelog: v0.61.0-nightly.20260912.g9c1b0a610...v0.61.0-nightly.20260913.g9c1b0a610

release: v2.0.3

What's changed

• Fixed read-only git commands in Bash unexpectedly asking for permission after a session had been running for a while (regression in 2.1.269)

OpenClaw v2026.9.4

20 direct commits · 1,558 pull requests · 294 contributors

Changes included in this release

The release notes and changelog contain the same content, presented in two formats:

• Release notes — formatted for people, with expandable sections.
• Changelog — plain Markdown for AI agents and tools.

Thanks

@0xCyda @100yenadmin @1Vision365-PeterTijsma @609NFT @84dnnvbdvp-debug @aaajiao @aatreya @abacha @adinballew @aeoess @aevgeniou @ai-hpc @aim9sour @akagifreeez @aleps001 @alexjpanagis @alexph-dev @Alix-007 @aminekhettat @andrea-kingautomation @anguslogan01 @aniruddhaadak80 @ansxor @anyech @arcabotai @Artemeey @ashawwal @aspalagin @AVCarp @avp717 @ayaangazali @azuretek @barbarhan @Baumus @benjaml4 @BottaniCals @brainatworkharris @bricelb @BsnizND @c0ncatenate @cai-ops @ccaprani @ceckert @chegherian @chelsealong @chl-0537 @ChrisCantwell @chrislro @cjn119-ui @CK-XYZ @Cobblestone-Digital1 @Colton-Harris @Conan-Scott @cp1369 @crash2kx @DasX @dbarbatti @developercrocodiles @Devin-Linux @dh-js @DilapidatedDolphin98 @dillona @dimonnld @DonnieFi @Dreamer-HIT @drobison00 @dw1161 @ejc3 @ekinnee @elbourne12345 @eleqtrizit @elikampf @ElvisIO7 @Enominera @ericcaiwx-star @fabiolr @fahrenhe1t @fanyangCS @fanyuantaier @fede-kamel @Finn763 @FlagshipClaw @fulgerulnegru @fuller-stack-dev @galiniliev @GDXbsv @geekforlife @GitHoubi @glenn-agent @Glucksberg @goutamadwant @gozu @Grynn @guarismo @guojiongming @gwiltschek @hannesrudolph @HAPPYFAPTAIN @harjothkhara @harshitgupta31415 @Hawk5150 @hayden-cc @he-yufeng @Hekzory @HermanZeng @hugenshen @husodrn46 @hxy91819 @igs-rogenlo @ikenraf @infocus13 @islandpreneur007 @itanyplus @IWhatsskill @jackatagenticforce @Jackten @jai-assistant @jailbirt @jalehman @jarvismazz @jason-allen-oneal @jerabinovich @jesse-merhi @jialele @jinngimk-lang @jjjhenriksen @JKamgang @jlacroix82 @jlapenna @jmissig @jodok @JunfXiao @kashivreddy @Kaspnov @kesslerio @kiagentkronos-cell @Kimiyu-186 @KingAkrej @kingkong9817 @KirDE @kopl-blip @kvnloo @laisonamarante @laurencebrown @laurenceputra @leapdragon @legupsystems @lei-happy @leilei3167 @Lendersmark @Leon-SK668 @LightningWareLLC @linhongyu510 @lisheguo @LiuwqGit @lizhengwu @lonexreb @louisfy @lraesly @ly85206559 @MAG-Linares-Andalucia @manumadrigal09 @markthebest12 @martins-oss @Marvinthebored @masatohoshino @MasterSwords1 @matthewmoroz @MaxVidkrytaklishnya @mgabor3141 @miguelbranco80 @mikronn2 @MoerAI @morrow-bluedot @MrNozz @najef1979-code @narbs @Newsstand @NianJiuZst @nissl24 @nkdmike @nocodet888-arch @noelillinger @north-echo @NovaUnboundAi @NullArbitrage @obviyus @Oliverbot26 @omarshahine @ooiuuii @orangejon @OuiOui33 @oywino @pash-openai @Patrick-Erichsen @pbergeot @pcpilot-dev @Peetiegonzalez @pengzh1 @PeterHodl @peterkaynie @pfrederiksen @pgondhi987 @pick-cat @piotx @pollybot13 @postoso @qingminglong @razvangirgiz @rboy1 @rgregg @richard355168 @rico007 @rileyjjy @rjamoul @rlosito @romneyda @rondavis007 @rqlangley @ruel225 @ruicatalao7 @russellweiss @safzanpirani @sallyom @samrrr @sappkevin @schjonhaug @schwanncells @scotthuang @sedrak-hovhannisyan @sercada @seven7763 @shakkernerd @shaozhengkun123 @shojikumaru @skaneta @sloptop-the-terrible @soroyue @spectrl @srikolagani @steipete @stephane-fci @stevenlee-oai @sunlit-deng @sunnyandtec-ak @sunnyiren-max @sunnyshu0925 @syfvb @synthalorian @szqub @takhoffman @teddytennant @theangrypit @thecrazylex @thien-ngn @thomasmoenco @tilor @timetrvlr @todddickerson @tomdailey55 @toneloke @toraiwa @tskerpnext @unknowbug @vacinc @vincentkoc @von8794 @vyctorbrzezowski @wangmiao0668000666 @wenbiyou @wolikimcheng @wpu911 @xialonglee @xiaoguomeiyitian @xueqingli1 @xuxyyy @xx441 @xydigitlybnnnn @xydt-juyaohui @xydt-tanshanshan @yangxiansheng @yanhe1169 @yetval @yigtwxx @ylcn91 @yncubys @youens @yxloveql @zachisfine @zenglingbiao @zhangguiping-xydt @zhuyankarl @zwyhmcn @zyw02

Release verification

• Signed source: 3a9d69db306cd7f081e06254cb89c4bcc14a7107.
• Full stable validation: passed, attempt 2. Qualification also verified 15 performance measurements and 20 real OpenAI completions across 10 upgrade baselines.
• Core npm publication: passed; exact qualified bytes, registry signatures, provenance and fresh install verified.
• 90 npm plugins and 3 core companion packages: published at latest, exact bytes verified.
• Docker publication: passed; public GHCR and Docker Hub manifests and attestations match qualified artifacts.
• Original publisher: failed during npm propagation readback. GitHub finalized through manual recovery; no package republish.
• Telegram and Parallels checks: explicitly waived by the release owner, not passed.
• macOS DMG, ZIP, and debug symbols are public and byte-verified against the signed/notarized artifacts; the stable update feed is live and verified.
• Pending: ClawHub recovery, npm beta-selector synchronization, remaining native app distribution, and stable main closeout. Android native qualification failed. Windows historical-upgrade and Vercel mirror advisory failures remain recorded.
• The repaired split-publication verifier passed live npm/Docker verification. Full beta-selector verification and the immutable main-closeout record remain pending. The attached postpublish evidence preserves the earlier recovery snapshot; these follow-ups are not marked complete.

release: v2.0.2

release: v2.0.1

Codewhale 0.9.13

• Remove two noisy warnings from the distro validation scripts

• Cleanup diff

• Fix formatting of USR_SHARE_WSL assignment

Co-authored-by: Copilot Autofix powered by AI 175728472+Copilot@users.noreply.github.com

Co-authored-by: Copilot Autofix powered by AI 175728472+Copilot@users.noreply.github.com

What's Changed

• fix(core): prevent indirect prompt injection via build file modifications and untrusted flags by @villahernandez-coder in #29250
• fix(sandbox): harden filesystem boundaries and isolate runtime state by @diegogodinezr in #29214

New Contributors

• @villahernandez-coder made their first contribution in #29250

Full Changelog: v0.61.0-nightly.20260911.ged2ac40df...v0.61.0-nightly.20260912.g9c1b0a610

fix(release): use V2 Docker artifact paths (#48571)

Matomo 5.14.0-alpha.20260911180532 (Pre-release)

We recommend to read this FAQ before using a pre-release in a production environment.

Please use the attached archives for installing or updating Matomo.
The source code download is only meant for developers and will require extra work to install it.

• Latest stable production release can be found at https://matomo.org/download/ (learn more) (recommended)
• Beta and Release Candidate releases can be found at https://builds.matomo.org/ (learn more)

For stable releases, please refer to CHANGELOG.md for details.
For pre-releases, please refer to CHANGELOG.md of the minor branch.

• The composer now shows the current branch's GitHub pull request — PR number, merge status, changed-line totals, and CI checks. Click through to open it in your browser, or expand CI to inspect individual checks and their logs; status refreshes every 30 seconds while visible, on window focus, and on demand. If the branch has no PR, Create PR opens GitHub's comparison form. Requires the GitHub CLI (gh) installed and signed in, plus a GitHub.com origin remote; the row hides itself on the default branch, detached HEAD, and unsupported repositories. Cline does not push commits or submit the PR for you
• The Customize view's Tools, Skills, and Rules tabs now read as one consistent list instead of three different ones, matching the pattern Plugins already used. Tools gets a search bar that filters both sections and per-section Enable all/Disable all that only touches what's visible; Skills gets an in-place enable/disable toggle — previously the desktop app had no concept of a disabled skill, so disabled ones were hidden and unreachable — and the same Copy path / Uninstall menu Plugins use. Tabs are reordered to Tools, Plugins, Skills, Rules, MCP, Hooks and open on Tools, and the sidebar's "New Task" button is now "New Session"
• Deleting a queued prompt no longer leaves it in the transcript as a message that never ran. The sidecar inferred a queued prompt had started whenever the pending list shrank and its head changed — which is exactly what deleting the first queued prompt (or discarding the queue) looks like. It now relies only on the runtime's real start event
• A session forked from a checkpoint restore no longer comes back stuck on "Thinking...". Sessions that materialize with seeded history never passed their status when persisting, so the row and manifest were written as "running" while the live session was idle; resuming from that manifest then showed a session that was never going to finish
• Sending an image with no text no longer fails with "session input requires a prompt string" — the composer asks for a message instead of letting the request through to a backend that rejects it
• Image attachments in formats the model pipeline can't read (HEIC, TIFF, SVG, BMP, ICO, and friends) are now rejected at attach time — by picker, paste, or drag-and-drop — instead of failing later in the turn. Files whose type has to be inferred from the extension are classified the same way
• Signing out of ChatGPT (Codex) now sticks. Sign-out removes the provider entry, but the runtime re-imports any missing provider from the classic extension's stored credentials on every command, so the next action signed you straight back in. The legacy Codex credentials are now cleared too, and a failed clear reports the sign-out as failed instead of quietly succeeding
• Auth failures on providers that log in through a local CLI — Claude Code, Codex CLI, OpenCode — now point you at that CLI instead of Settings → Models, where there is nothing to fix. "OAuth session expired", "Not logged in · Please run /login", and similar messages are also recognized as credential failures now, so they get a hint at all
• Model lists now refresh from the live catalog for every provider that uses the shared catalog, not just Cline and Cline Pass. Providers with their own endpoint-owned model lists are unaffected, and the first providers listing is still network-free
• Cline Pass and free models now report zero cost instead of the upstream provider's price
• Session history rows no longer overlap their own hover metadata when a label is wider than the fixed label column
• Scheduled sessions no longer stall out. The poller could stop advancing, and capacity waits were counted as run attempts, so a schedule could burn through its retries without ever running. Execution lifecycle and capacity claims are now fenced atomically. New recurring schedules also default to your local timezone instead of UTC; existing schedules without a timezone keep it that way when edited
• Automation event acceptance is now atomic and retryable, so an event can't be half-accepted and lost if delivery fails mid-way
• Nested PowerShell commands no longer flood errors and look like a hang. Commands run through an outer PowerShell bootstrap, so a nested powershell -Command "... $_ ..." had $_ interpolated away by the outer parser before the inner shell saw it — a Where-Object { $_.Name ... } pipeline then errored once per item over a large tree while still exiting 0. Redundant nested invocations are now unwrapped and run directly, only when that provably preserves semantics (same PowerShell edition, no profile loading, fully quoted command). Cline is also told which edition it's actually on — Windows PowerShell vs. Microsoft PowerShell — and to stop wrapping commands in a shell it's already running in
• Prompt telemetry to Cline's tracing backend is now limited to Cline and Cline Pass requests. Turns run against your own provider keys are not traced
• Cline Pass now appears in the composer's provider picker alongside Cline. One Cline sign-in configures both — Cline Pass stores its credentials under the Cline account rather than having its own — but the picker only listed providers with their own saved settings entry, and onboarding writes just the Cline one. A new Cline Pass user therefore saw a single row
• The composer's provider picker has a Set up another provider row at the bottom that opens Settings → Models. The picker only lists what you have already configured, so there was no way to reach the rest of the catalog from the composer
• Dropped the "Configured" checkmark from the composer's provider picker (added in 0.0.25). Every row in that picker has a saved settings entry, so for anyone who set their providers up in the app every row carried the same green check and it read as decoration. Settings is still where provider readiness is shown, and it distinguishes a real credential from an entry a legacy migration left behind

Full Changelog: desktop-v0.0.25...desktop-v0.0.26

fix(release): publish frozen plugins with valid ClawHub categories (#…

This is a servicing release of Windows Package Manager v1.30. If you find any bugs or problems, please help us out by filing an issue.

New in v1.30

--ignore-unavailable flag for install

Added a new --ignore-unavailable flag to the install command. When installing multiple packages, this flag allows the operation to continue with the remaining packages instead of failing entirely when one or more packages are not found in the configured sources. This brings the same behavior previously available with import --ignore-unavailable to direct multi-package installs.

Bug Fixes

• Fixed an issue where winget search --id <msstoreId> could fail to return a Microsoft Store package unless --exact was also provided.
• Updated NUnit to v4
• Fixed a crash (0x8000ffff) when using --disable-interactivity with the Resume experimental feature enabled during install operations.
• Fixed relative path handling for rooted paths.

What's Changed

• Fallback to exact if REST source has no result for ID substring by Kaleb Luedtke (@Trenly) in #6309
• Add issue closure recommendation workflow by Demitrius Nelon (@denelon) in #6423
• Bump undici from 7.28.0 to 7.29.0 in /tools/WinGetLogViewer by Dependabot (@dependabot)[bot] in #6430
• Bump fast-uri from 3.1.4 to 3.1.5 in /tools/WinGetLogViewer by Dependabot (@dependabot)[bot] in #6431
• Add Copilot-Instructions label policy rule by Demitrius Nelon (@denelon) in #6440
• Add agent guidance for issues and PRs by Demitrius Nelon (@denelon) in #6446
• Improved the OS support requirements in the README. by Imre Eilertsen (@DandelionSprout) in #6447
• Ensure relative paths are rooted by Flor Chacón (@florelis) in #6357

Full Changelog: v1.30.100-preview...v1.30.140-preview

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

Co-authored-by: Ben Hillis benhill@ntdev.microsoft.com
Copilot-Session: 3086bdaf-bc43-4fed-88d1-3a95a21fd14e

Full Changelog: v0.61.0-nightly.20260910.ged2ac40df...v0.61.0-nightly.20260911.ged2ac40df

Tag for php-8.4.26RC1

Tag for php-8.5.11RC1

Tag for php-8.6.0beta3

🔥 What's New: v0.17.0

• Optimized Local Attention: Reduced memory overhead and enabled support for even longer contexts.
• Apple Silicon Acceleration: Added Metal residency support for improved inference performance on Apple devices.
• Extended Gemma 4 (12B): Introduced multimodal capabilities, multi-token prediction (MTP) acceleration, and extended context window support.
• Stability & Internals: General bug fixes and framework-level performance improvements.

This release is mostly about hardening and bug fixes, but there are some notable changes:

• .Render now takes an optional context argument: {{ .Render "view" $ctx }}, mirroring the partial API. This makes it possible to pass e.g. a dict to a content view. See #15077.
• The return keyword in templates has been reimplemented. It now works in any template (not just partials) and can be used anywhere, e.g. inside if or range blocks. See #15212.
• New resources.Publish template function and IndexOf method on Pages.
• related config: new tokenize option for index values, and index creation is faster.
• Several security fixes; see the notes below.

Note

• tpl/transform: Bump fileCacheEntryVersion in transform.ToMath (note) 8d88b8b @bep #15267
• resources/images: Bump formatVersionNumbers.PNG and fix version cache busting for images.Filter (note) d19e0a4 @bep #12536 #12543 #15266
• warpc/js: Upgrade katex to 0.18.4 (note) ec52e63 @bep #15254
• hexec: Fail on symlinks that escape the Node.js permission paths c05c012 @bep
• config/security: Deny text/org content by default e6abb9c @bep
• config/security: Add http.proxyFromEnvironment and document the resolved address check 6a2a955 @bep #15301 #15302
• deps: Upgrade github.com/gobwas/glob v0.2.3 => v1.0.0 efd2456 @bep #15273
• hugofs: Drop symlinked mount roots 938c820 @bep
• tpl: Improve the return keyword in templates 8405b80 @bep #15212
• resources/page: Don't let a title's "/" split an auto-derived slug 39507d5 @ipince #4092 #3577 #5571 #4090

Glob patterns

The glob library used for e.g. module mounts (includeFiles, excludeFiles), cascade targets, segments, deployment matchers and noVendor has been upgraded to v1.0.0. This is a complete rewrite of the matching engine that fixes a long list of correctness bugs, but it also means that some patterns may behave differently:

• Malformed patterns (e.g. an unclosed {, an empty [] class) now fail with a syntax error instead of being silently accepted.
• ** matches any sequence of characters including separators, but it is not the **/ "globstar" of shells: **/x requires the literal / and does not match x, and a/**/b does not match a/b. Use {**/,}x if you need both.
• \ is the escape character, so a literal backslash must be written as \\.

If a pattern that used to match no longer does (or vice versa), it was most likely relying on a bug in the old engine.

Security

• text/org content is now denied by default, as Org mode's export blocks and @@html:...@@ snippets pass raw HTML through unescaped, making it the same XSS sink as text/html. Sites with Org content can opt back in via security.allowContent.
• Remote fetches (resources.GetRemote etc.) now validate the resolved address at dial time and reject loopback, private, link-local, CGNAT and similar ranges. This only applies under the default security.http.urls allowlist; if you have customized it, you have opted into your own hosts and the check stands down. Proxies from HTTP_PROXY/HTTPS_PROXY hide the destination address from this check and are now ignored unless you set security.http.proxyFromEnvironment = true.
• Node.js tools (PostCSS, Tailwind CSS etc.) now fail before invocation if a symlink inside the project resolves outside the allowed read/write roots. If you have a legitimate link, add its target to security.node.permissions.allowRead.
• Mount roots that are themselves symlinks (e.g. themes/mytheme/assets -> /somewhere/else) are now dropped. This closes a gap in the themes/ confinement; absolute mount source values are still allowed.

Other

• {{ return <value> }} outside a partial is now an error; it was previously silently ignored.
• A page without an explicit slug whose title contains a / (e.g. Watch/listen to this) now gets a single URL segment (.../watch-listen-to-this/) instead of a nested one (.../watch/listen-to-this/). Taxonomy and term pages are not affected.
• Hugo is now built with Go 1.27.

KaTeX

When upgrading to Hugo v0.166.0, sites using transform.ToMath with the output option set to html or htmlAndMathml must update the KaTeX stylesheet referenced in their template(s) to version 0.18.4 or higher. Using older CSS versions like 0.16.21 will cause certain mathematical or chemical expressions to render incorrectly.

Example update:

- <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/katex@0.16.21/dist/katex.min.css">
+ <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/katex@0.18.4/dist/katex.min.css">

See these examples:

• https://gohugo.io/functions/transform/tomath/#step-3
• https://gohugo.io/render-hooks/passthrough/#example

Bug fixes

• tpl/strings: Fix replaceRE with zero-width assertions ae07063 @youdie006
• common/hreflect: Fix the off-by-one in the float to int overflow guards 5130d00 @youdie006
• resources/images: Fix filters on transparent colors and paletted images 7785668 @bep #12536 #12543
• github: Fix workflow for stale issues efe5cbc @jmooring #15261
• all: Run modernize -fix ./... 7b5199f @bep
• commands: Fix lang flag description in config command 87260e4 @jmooring #15223
• hugolib: Fix slice bounds panic when deleting multiple nodes at same path 49dceb1 @bep #15207
• hugolib: Fix ReadingTime and FuzzyWordCount calculations 5e70992 @jmooring #15206

Improvements

• js: Add es2025 as supported build target 857120b @bep #15307
• hugofs: Drop symlinked mount roots 938c820 @bep
• markup/highlight: Escape lineAnchors before passing it to Chroma 3b2d3b8 @bep
• tpl/partials: Slight performance improvement of the common partialCached case 9c2527f @bep
• Add internalExternal.IgnoreTailwindCSSSecurityError config option a36bd27 @bep
• config/security: Harden the default http.urls and resolved address checks (#15285) 24d5e42 @bep
• resources/images: Preserve the source palette for geometric filter chains 9e7c978 @bep #12543
• resources/images: Add golden test cases for geometric filter chains on paletted images 6b5b7d8 @bep #12543
• resources/images: Add some golden test cases 62e24b7 @bep #12536 #12543
• related: Speed up index creation f61346e @bep
• related: Add tokenize option for index values 850f11c @jmooring #7515 #15199
• resources/page: Don't let a title's "/" split an auto-derived slug 39507d5 @ipince #4092 #3577 #5571 #4090
• config/allconfig: Improve resilience of hugo mod init 90fe506 @jmooring #15253
• tpl: Separate deferred templates by escaping mode 49835f8 @Soundcreates #15234
• resources: Validate the resolved address on remote fetches d6e6f9e @bep #15247
• markup: Escape code-fence attribute values in the default renderer e4dc48c @bep #15247
• hugolib: Make .Render take an optional context argument bcde806 @bep #15077
• modules/npm: Make the generated workspace package private with a stable name df4ac34 @bep #15245
• common/hstore: Keep read lock while sorting map values 166d3ee @Soundcreates #15237
• metrics: Improve template metrics duration formatting a25af7f @Shiwang0-0 #15027
• Remove comments from rebuild test functions 723579f @bep
• hugolib: Add some fast render mode integration tests 85ad5e4 @bep
• Upgrade to Go 1.27 e31ff54 @bep #15228
• tpl: Improve the return keyword in templates 8405b80 @bep #15212
• page: Add IndexOf method to Pages bf05832 @Shiwang0-0 #13589
• tpl/resources: Add resources.Publish a05736c @bep #15208
• markup/pandoc: Support pandoc 3.11 and later 423e9ce @jmooring #15271 #15280

Dependency Updates

• build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 3fbfd27 @dependabot[bot]
• build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 393de58 @dependabot[bot]
• build(deps): bump golang.org/x/mod from 0.40.0 to 0.41.0 870f746 @dependabot[bot]
• build(deps): bump github.com/getkin/kin-openapi from 0.146.0 to 0.149.0 6152e22 @dependabot[bot]
• build(deps): bump github.com/bits-and-blooms/bitset 5b6e7c2 @dependabot[bot]
• build(deps): bump github.com/bep/lazycache from 0.8.1 to 0.9.0 dc03bb2 @dependabot[bot]
• build(deps): bump github.com/bep/tmc from 0.6.0 to 0.7.0 701dd33 @dependabot[bot]
• build(deps): bump github.com/yuin/goldmark from 1.8.5 to 1.8.6 b4062c8 @dependabot[bot]
• build(deps): bump golang.org/x/image from 0.44.0 to 0.45.0 cdd1627 @dependabot[bot]
• deps: Upgrade github.com/gobwas/glob v0.2.3 => v1.0.0 efd2456 @bep #15273
• build(deps): bump golang.org/x/mod from 0.39.0 to 0.40.0 d462968 @dependabot[bot]
• build(deps): bump github.com/tdewolff/minify/v2 from 2.24.16 to 2.24.17 fd5f7c6 @dependabot[bot]
• build(deps): bump github.com/gohugoio/httpcache from 0.8.0 to 0.9.0 6b33517 @dependabot[bot]
• build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 5f0d88b @dependabot[bot]
• build(deps): bump golang.org/x/tools from 0.48.0 to 0.49.0 9171dae @dependabot[bot]
• build(deps): bump software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.2 d1ee825 @dependabot[bot]

Release Date: September 7, 2026

Patch release. This tag rolls up current main since v0.21.0 for tagged deployments and downstream consumers.

About this release

Measured at commit 6178e9f4eed8d99f4fc550add939d58c7bed6206, the window since v0.21.0 contains 5,139 non-merge commits across 4,364 changed files (+601,014 / −768,419). GitHub reports 632 merged PRs in the release window at preparation time. These figures exclude the release-version commit.

The rollup includes the codebase modularization, file-operation and startup performance work, provider and model updates, desktop session controls and browser annotations, MCP authorization improvements, cron scheduling and delivery fixes, and delegation reliability improvements. This patch does not attempt to enumerate or announce every feature in the window.

Full curated release notes for this window will ship with v0.22.0, covering everything since v0.21.0, including the intervening patch releases, feature details, and complete contributor credits.

Updating

• Existing install: hermes update
• Fresh install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash
• Managed deployments should update through their deployment tooling using the new tag.

Full Changelog: v2026.8.31...v2026.9.7

https://github.com/nextcloud-releases/server/releases/tag/v34.0.4

https://github.com/nextcloud-releases/server/releases/tag/v33.0.9

https://github.com/nextcloud-releases/server/releases/tag/v32.0.15

https://github.com/nextcloud-releases/server/releases/tag/v35.0.0rc4

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)
  • Clear potentially large performance measures in DEV (@hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)
• Only remove properties from Host Singletons on release (@gnoff #37112)
• Don't invoke effects on moved children in StrictMode (@sophiebits #36948)
• Throw a clearer error when a rejected Promise is incorrectly instrumented (@eps1lon #36328)
• Fix context propagation into Suspense fallbacks (@acdlite #36160)
• Fix context propagation through suspended Suspense boundaries (@acdlite #35839)
• Fix useDeferredValue getting stuck (@gaearon #36134)
• Update useActionState error message to say "action state" instead of "form state" (@rickhanlonii #35790)
• Don't warn when rendering data block scripts (@eps1lon #35953)
• Treat fibers with alternates as mounted in getNearestMountedFiber (@sebmarkbage #35578)
• Always instrument the lazy initializer thenable (@gnoff #35521)
• Annotate cascading updates for DevTools performance tracks in DEV (@huntie #34961)
• Resolve the .default export of a React.lazy as the canonical value (@sebmarkbage #34906)
• Limit owner stacks to 10 frames (@eps1lon #34864)
• Ensure useEffectEvent reads latest values in forwardRef and memo() components (@eps1lon #34831)

React DOM

• Copy source onto the synthetic toggle event (@lazerg #37389)
• Update HTML parser rules for the new <select> parser (@josepharhar #34804)
• Update defaultValue for type="number" inputs to match other input types (@sophiebits #36980)
• Avoid setting innerHTML when it hasn't changed (@sophiebits #36949)
• Forward the nonce option in ReactDOM.preloadModule() (@UditDewan #36851)
• Support fetchPriority for module resources (@TheAlexLichter #36835)
• Track stylesheet preloads when explicitly preloaded to avoid unnecessary suspension (@gnoff #36386)
• Suggest correct casing for the misspelled credentialless iframe attribute (@vmx906 #36322)
• Add credentialless as a recognized boolean attribute for iframes (@vmx906 #36148)
• Prevent reentrant finishedTask from calling completeAll multiple times (@gnoff #36287)
• Update the CSS shorthand property list (@kidonng #35636)
• Support the maskType SVG prop (@sleitor #35921)
• Add support for onFullscreenChange and onFullscreenError events (@chirokas #34621)
• Include submitter in submit events (@eps1lon #35590)
• Fire onReset when automatically resetting forms (@eps1lon #35176)
• Use the FormData submitter parameter (@jenseng #29028)
• Fix form status reset when component state is updated (@eps1lon #34075)
• Batch updates from resize events until the next frame (@eps1lon #35117)

React Server

• Add nonce to rendered import maps (@mattcosta7 #37339)
• Add an onBrowserBailout option to observe subtrees that defer to the browser (@gnoff #37193)
• Stop the caller's signal from retaining a finished render (@unstubbable #37315)
• Construct the render lifetime controller only when it is needed (@unstubbable #37357)
• Fix react-dom/server hanging on Deno (@fraidev #35235)
• Extend stack overflow recovery to retries in SSR (@jackpope #36977)
• Fix false-positive hydration mismatch on nonce attributes (@MaxwellCohen #37030)
• Guard shell-error callbacks instead of nulling them out on the request (@eps1lon #36916)
• Stop firing onAllReady after the shell errored (@eps1lon #36903)
• Treat an incomplete tree as an error during error recovery (@acdlite #36911)
• Fix non-script modulepreload tracking (@fallintoplace #36564)
• Finalize postponed nextSegmentId after the prelude flush (@gaojude #36779)
• Preserve referrerPolicy in image preload headers (@ulises-jeremias #36803)
• Allow pending work to specialize abort reasons (@gnoff #36586)
• Abort tasks that suspend after aborting during render (@gnoff #36585)
• Finish abort in a scheduled task (@gnoff #36580)
• Fix aborts during resumed rendering (@gnoff #36584)
• Track abort state on the request (@gnoff #36583)
• Model external work scheduling explicitly in the fb bundle (@gnoff #36576)
• Continue reporting aborted task errors after a fatal abort (@gnoff #36575)
• Disallow abort reentrancy (@gnoff #36574)
• Stop transpiling computed property names (@eps1lon #36542)
• Fix crash when capturing the callsite of a stalled use() of a rejected Flight chunk (@lubieowoce #36544)
• Double invoke effects in Strict Mode during hydration (@eps1lon #35961)
• Add additional task reentrancy protections in Fizz (@gnoff #36291)
• Don't outline Suspense boundaries with suspensey CSS during shell flush (@gnoff #35824)
• Push a stalled use() to the owner stack and debug task (@eps1lon #35226)
• Fix useId tracking on replay (@gnoff #35518)
• Correctly handle replaying when hydrating (@gnoff #35494)
• Simplify the createSuspenseBoundary path (@sebmarkbage #35087)
• Unify preamble-only fields to save a field on Suspense boundaries (@sebmarkbage #35068)
• Unify prerender-only fields to save a field on Suspense boundaries (@sebmarkbage #35067)
• Push halted awaits to the owner stack for late-arriving I/O info (@unstubbable #35019)
• Include all Node.js APIs in the Bun entrypoint for react-dom/server (@RiskyMH #34193)
• Detach a Suspense boundary after flushing its segment (@gnoff #34694)

React Server Components

• Keep an element pending while a referenced row is resolving (@unstubbable #37542)
• Fix RangeError from exponential debug info growth (@unstubbable #37481)
• Abort the cache signal when debug objects are retained (@unstubbable #37342)
• Transfer key validation of lazy nodes when they are unwrapped (@unstubbable #37258)
• Add pending_weak to the Flight thenable protocol (@acdlite #37154)
• Outline and dedupe repeated strings (@gaearon #37147)
• Port Reply Server traversal guards to the Flight Client (@eps1lon #37144)
• Define Flight chunk .then with Object.defineProperty (@eps1lon #37109)
• Support Turbopack's experimental array format for chunks (@sampoder #37095)
• Limit fake JSX call site stacks to 10 frames (@timneutkens #37086)
• Improve performance when decoding Flight replies (@gnoff #37090)
• Recognize Node 22+ V8 frames for Promise statics in debug info (@gaearon #36969)
• Tailor the warning for binary data serialized through toJSON (Node Buffer) (@unstubbable #36873)
• Resolve models before JSON.stringify for faster serialization (@mhart #36795)
• Prune debug info when chunks error (@gnoff #36782)
• Avoid main-thread stalls from large debug strings (@unstubbable #36570)
• Fix stranded row content under Node stream backpressure (@unstubbable #36516)
• Fix dropped FormData entries in decodeReplyFromBusboy (@unstubbable #36468)
• Harden types and improve performance of Flight replies (@eps1lon #36425)
• Add more cycle protections to Flight replies (@eps1lon #36236)
• Transport AggregateError.errors (@eps1lon #36156)
• Bail out early when a backing entry for Blob deserialization is not a Blob (@eps1lon #36055)
• Clear chunk reason after successful module initialization (@unstubbable #36024)
• Add support for transporting Error.cause (@eps1lon #35810)
• Walk parsed JSON instead of using a reviver for faster RSC payload parsing (@timneutkens #35776)
• Skip transferReferencedDebugInfo during debug info resolution (@unstubbable #35795)
• Add unstable_allowPartialStream option to Flight Client (@unstubbable #35731)
• Fix encodeReply for JSX with temporary references (@unstubbable #35730)
• Fix debug channel flag in Node.js renderToPipeableStream (@feedthejim #35724)
• Fix stack overflow in visitAsyncNode with deep async chains (@unstubbable #35612)
• Allow Server Components to render context providers from client modules (@rickhanlonii #35675)
• Allow overriding request.timeOrigin via options.startTime (@lubieowoce #35598)
• Warn once if eval is disabled in the dev environment (@eps1lon #35661)
• Restore original function name in dev server callstacks served with unsafe-eval (@eps1lon #35650)
• Fix react-markup types for server references (@eps1lon #35634)
• Add more DoS mitigations to Flight replies and harden Flight (@unstubbable #35632)
• Allow cyclic references to be serialized when unwrapping lazy elements (@unstubbable #35471)
• Improve cyclic thenable detection in Flight reply server (@cvan20191 #35369)
• Add extra loop protection to Flight reply server (@sebmarkbage #35351)
• Patch Promise cycles and toString on Server Functions (@sebmarkbage #35345)
• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon #35290)
• Never parse then functions in Flight replies (@sebmarkbage #35289)
• Patch Flight reply server with fixes from Flight Client (@sebmarkbage #35277)
• Complete the list of Node.js internal Promise awaits (@eps1lon #35161)
• Reduce risk of maximum call stack exceeded when emitting async sequences (@eps1lon #35159)
• Fix pending chunks count for streams and async iterables in DEV (@unstubbable #35143)
• Fix broken byte stream parsing caused by buffer detachment (@unstubbable #35127)
• Fix hasReadable flag in Node.js clients' debug channel (@unstubbable #35039)
• Fix debug info filtering to include later resolved I/O (@unstubbable #35036)
• Cache the value when visiting the same I/O or Promise along different paths (@sebmarkbage #35005)
• Clone subsequent I/O nodes when resolved more than once (@sebmarkbage #35003)
• Fix hang after resolving cyclic references (@unstubbable #34988)
• Allow passing DEV-only startTime as an option (@sebmarkbage #34912)
• Ignore bound-anonymous-fn resources as they're not considered I/O (@sebmarkbage #34911)
• Fix detached ArrayBuffer error when streaming typed arrays (@unstubbable #34849)
• Exclude RSC stream if the stream resolves in a task (@sebmarkbage #34838)
• Forward the current environment when forwarding I/O entries (@sebmarkbage #34836)
• Look for moved debug info when logging component performance track (@sebmarkbage #34839)
• Respect displayName of Promise instances on the server (@sebmarkbage #34825)
• Avoid unnecessary indirection when serializing debug info (@unstubbable #34797)
• Fix preload as attribute for stylesheets (@unstubbable #34760)
• Don't serialize toJSON in debug path and omit wide arrays (@sebmarkbage #34759)
• Add support for <Activity> (@eps1lon #34697)

Notable Changes

• [71106e1f17] - crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495
• [afca0a912d] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #63949
• [6274fccbd9] - deps: update OpenSSL to 3.5.8 (Node.js GitHub Bot) #65542
• [53cba013c7] - deps: update Undici to 7.29.1 (Node.js GitHub Bot) #65789
• [0529772798] - (SEMVER-MINOR) lib,src: improve histogram implementation (James M Snell) #65024
• [41c7062b81] - (SEMVER-MINOR) net: improve performance of net.BlockList (James M Snell) #64974
• [5197b5a3c5] - (SEMVER-MINOR) perf_hooks: add statistical hypothesis testing to histogram (James M Snell) #65416
• [35c635b032] - (SEMVER-MINOR) util: add non-throwing MIMEType.parse (James M Snell) #64965

Commits

• [84d706cb9b] - assert: improve documentation wording (Kamal Rawal) #64953
• [90d127db33] - (SEMVER-MINOR) benchmark: add --analyze mode to compare.js (James M Snell) #65416
• [ad1d7884c3] - benchmark: add test-only and mock timers cases (Luan Muniz) #64097
• [1d8f045914] - benchmark: apply highWaterMark in webstreams pipe-to (Matteo Collina) #65138
• [ed7ba3c993] - benchmark: complete the sqlite is-transaction fix (Edy Silva) #65218
• [c8837e1aa3] - benchmark: add test runner hooks and options (Luan Muniz) #63754
• [2ba8661e23] - buffer: prevent string write offset overflow (Matteo Collina) #65043
• [cc9ee6c2ae] - buffer: treat detached ArrayBuffers as empty (Archkon) #64504
• [5a5d73e4c5] - build: pass target architecture to small-icu genccode (ulofiai) #65095
• [273e72d1a5] - build: deprecate always enabled --enable-static (Chengzhong Wu) #65103
• [89a67246e3] - build: check FIPS option value in node.gyp (Filip Skokan) #64982
• [2d21f41cd5] - build: handle malformed OpenSSL macros (Filip Skokan) #64982
• [f62bc0f862] - build,win: add PGO workload scripts (Stefan Stojanovic) #63696
• [33d0c7dc12] - child_process: keep SIGWINCH from killing on Win (Kirill Saied) #64510
• [71106e1f17] - crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495
• [419af8b86d] - crypto: fix missing error checks on ASN1_STRING_to_UTF8() (Nora Dossche) #65200
• [8029383f3f] - crypto: use available BoringSSL APIs (Filip Skokan) #65423
• [a9bd780e19] - crypto: remove obsolete BoringSSL shims (Filip Skokan) #65423
• [7defefad3f] - crypto: read WebCrypto inputs through primordials (Filip Skokan) #65115
• [6ed1e38627] - crypto: fix disabling FIPS mode (Filip Skokan) #64982
• [afca0a912d] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #63949
• [9b9dd6e9cf] - debugger: wait for target startup (Filip Skokan) #65194
• [07faaeeffd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
• [53cba013c7] - deps: update undici to 7.29.1 (Node.js GitHub Bot) #65789
• [0268ca547c] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542
• [6274fccbd9] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542
• [6bdcd121fa] - deps: update zlib to 1.3.2.1-motley-8002e91 (Node.js GitHub Bot) #65316
• [c2aa446b6d] - deps: update simdjson to 4.6.7 (Node.js GitHub Bot) #65318
• [3e58e48ea8] - deps: update googletest to 49495eacfdbda3f4b6ba219923fedbb2e3f99376 (Node.js GitHub Bot) #65317
• [670b3665c0] - deps: cherry-pick libuv/libuv@e640dc9 (ulofiai) #65118
• [ca1c67b021] - deps: float ICU-23262 patch for icu78 (René) #64678
• [4ad043b0aa] - deps: enable AVX-512 OpenSSL asm with clang (Daniel Lemire) #65136
• [96b4af109b] - deps: update googletest to d89aac5f0dd4021198d903d39de16f896726de21 (Node.js GitHub Bot) #65153
• [774f663c56] - dgram: don't swallow bind errors when callback is provided (armanmikoyan) #62602
• [94b118d62e] - diagnostics_channel: validate before channel activation (Trivikram Kamat) #65313
• [09788665bd] - dns: validate address type in lookupService (Lazizbek Ergashev) #64878
• [15f95fc0e2] - dns: validate port range in setServers() (René) #65021
• [37b9e9a154] - dns: fix crash on setServers with port 0 (Lazizbek Ergashev) #65009
• [cd6205fa0d] - doc: update AHAFS reference link (Taeuk Ha) #65481
• [0e6f9ae42e] - doc: fix property names in os.networkInterfaces() example (Jihwan) #65469
• [034a827b41] - doc: fix broken links in cli.md (Donghoon Kang) #65412
• [eb364621d4] - doc: remove outdated WASI version fallback (이혜미) #65303
• [b13f425bf8] - doc: fix broken GYP link in n-api.md (Donghoon Kang) #65413
• [45c4011067] - doc: document that an empty OPENSSL_CONF skips config loading (Orgad Shaneh) #64949
• [fde6776c5f] - doc: fix broken TLS security level example (soreavis) #65391
• [290c1fec04] - doc: clarify socket destroyed behavior (Dayun) #65395
• [a7e8269947] - doc: update outdated nodejs.org guide links (Donghoon Kang) #65394
• [7809f11249] - doc: clarify that ipv4 mapped to ipv6 are classified as ipv6 (Vedant Kulkarni) #62117
• [64cd3a6e95] - doc: clarify how fs.Dirent file types are determined (soreavis) #64532
• [9b92fdce14] - doc: update security release prepare command (Rafael Gonzaga) #64699
• [6f9b9df3c1] - doc: clarify copyFile symlink behavior (T) #62941
• [2480acb550] - doc: document setRawMode write access on Windows (Erik Demaine) #63856
• [a1e9c3a5db] - doc: add missing return types in fs.md (Chaseton Collins) #65307
• [4533572040] - doc: add missing return types in buffer.md (Yuya Inoue) #65308
• [39ecedbbd2] - doc: fix lint clean command (greenhead) #65274
• [0b1fb8fcd8] - doc: fix typo in onboarding.md (서울민트초코) #65295
• [3165b5d38a] - doc: add missing added: tags to fs.lchmod (Lazizbek Ergashev) #65283
• [113b808e59] - doc: fix SQLite changeset constant descriptions (greenhead) #65265
• [c3eb51d5a1] - doc: document open pull request limit (Matteo Collina) #65250
• [d7accdcd52] - doc: document http2 header constants (Harjoth Khara) #64548
• [f47111416f] - doc: create ai-guidelines and include to CONTRIBUTING (Rafael Gonzaga) #62105
• [c3b120e737] - doc: update synopsis (Augustin Mauroy) #65171
• [39f4c831fd] - doc: fix broken internal links (greenhead) #64901
• [be25cdd69e] - doc: report proper return type on urlPattern.test (Brian Muenzenmeyer) #64831
• [1bf7737810] - doc: fix permission documentation examples (greenhead) #64897
• [b7932e68a1] - doc: document sqlite parameter binding (Guilherme Araújo) #65089
• [5234a5169c] - doc: finalize statements in sqlite examples (Guilherme Araújo) #65088
• [39ea929da7] - doc: document quic stopSending() and resetStream() (Issac) #64888
• [2ba198db73] - doc: clarify sqlite bare parameter default (Sumit Kumar Das) #62009
• [314f9b200f] - doc: remove usage of util.inherits (Augustin Mauroy) #60817
• [d82a61662c] - doc: fix grammar in worker_threads.md (이혜미) #64913
• [44c0c8ff5b] - doc: clarify OpenSSL FIPS configuration (Filip Skokan) #64982
• [9b2ca70e0d] - doc: remove --expose-gc flag from CLI documentation (Dario Piotrowicz) #58909
• [a0a12397b9] - doc: document ArrayBuffer support in pbkd2Sync (kyungrae2002) #64976
• [b48699e077] - doc: correct default highWaterMark values (Yilong Li) #64617
• [0312ee133c] - esm: avoid super-linear data URL MIME regex (Sumit Kumar Das) #61951
• [cd84d55c81] - esm: only register text format when enabled (Efe Karasakal) #64992
• [c0a8ef611e] - esm: fix wasm import name in error message (이혜미) #64950
• [e6c34f90c2] - events: inline iterationCondition hybrid dispatch closure (Szymon Łągiewka) #64473
• [6ee4b40c91] - events: inline createEvent hybrid dispatch closure (Szymon Łągiewka) #64473
• [367549eed5] - fs: use sized reads for large files in readFileUtf8 (Shelley Vohr) #65328
• [8a5b1ae4c2] - fs: fix realpath of namespaced drive paths (Jason Zhang) #65378
• [c9233b950d] - fs: fix glob early return skipping sibling entries (Srinu desetti) #64895
• [bc54dd8905] - fs: pass symlink type in cp when filter is provided (Jerry Zhao) #62654
• [fcb4333aca] - fs: allocate FSReqPromise stat arrays lazily (Samuel Attard) #63886
• [c35876154e] - fs: fix out-of-bounds write in mkdtemp for long prefixes (Hierax_Umbra) #64770
• [b269616936] - fs: treat std::errc::permission_denied as EPERM error (Kirill Saied) #64698
• [212fe77e76] - fs: add windowsHandle option to file streams (Kirill Saied) #63851
• [75df6cb435] - http: improve performance with known-length calls to end() (Tim Perry) #65466
• [48d9cd4a28] - http: cache maxHeaderPairs per header section (GetThatCookie) #64988
• [04785c8f43] - http: fix keylog listener setup on existing agent sockets (Shani Singh) #65066
• [4b90031534] - http: emit drain on socket takeover and avoid stale HWM reuse (Naman Trivedi) #64991
• [83a27559cd] - http2: adapt receive deferral for Node.js 24 (Matteo Collina) #65093
• [f43bed0ecc] - http2: avoid uaf while receiving and sending rst_stream (esgor) #64166
• [b42d664321] - inspector: avoid calling into JS from V8 interrupts (Joyee Cheung) #65028
• [6bf852197d] - lib: use bracket notation instead of startsWith/endsWith for single char (Taejin Kim) #61500
• [151ca7e104] - lib: harden webidl dictionary member reads (Filip Skokan) #65115
• [7e8c2c9f44] - lib: use validateArray for array arguments (greenhead) #64959
• [424fe2bc5a] - lib: add and test [EnforceRange] in webcrypto dictionaries (Filip Skokan) #65091
• [0529772798] - (SEMVER-MINOR) lib,src: improve histogram implementation (James M Snell) #65024
• [186e1b76e8] - meta: move targos to emeritus (Michaël Zasso) #65393
• [b41b07c72a] - meta: add unified http api initiative (James M Snell) #65139
• [f85b6ecd67] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #65182
• [8f3d01bdce] - meta: add Aviv Keller to .mailmap (Aviv Keller) #65048
• [cfad1d5b28] - meta: update sccache to 0.17.0 (René) #64985
• [349c53c441] - module: report unreadable package.json (Paul Bouchon) #65223
• [bd21e6706e] - module: cache nearest parent package.json per directory (Shelley Vohr) #65326
• [961bd04370] - module: fix --check on ambiguous ESM files (Paul Bouchon) #65203
• [f45ef73420] - net: handle undefined parent in _unrefTimer and _destroy (Shivay-98) #64644
• [41c7062b81] - (SEMVER-MINOR) net: improve performance of net.BlockList (James M Snell) #64974
• [5197b5a3c5] - (SEMVER-MINOR) perf_hooks: add statistical hypothesis testing to histogram (James M Snell) #65416
• [1722ddac28] - permission: enforce addon permission in GetLinkedBinding (Rafael Gonzaga) #65432
• [dff2b675db] - process: validate resource stats array offsets (Archkon) #65098
• [f277983e7b] - quic: changes for nghttp3_conn_close_stream2 (Marten Richter) #64574
• [a4c770c78e] - quic: mark drain promise handled (James M Snell) #65319
• [2460b171c5] - quic: reset rejected HTTP/3 request streams with H3_REQUEST_REJECTED (trivenay) #65442
• [18a7ccf302] - quic: write desired size needs update on maxstream (Marten Richter) #64768
• [9017f4a780] - quic: do not destroy incoming streams that have a consumer (trivenay) #65335
• [ddc41c1ef4] - quic: fix wake up blob (Marten Richter) #64044
• [88bee43d7c] - quic: convert incoming :status header to number (Hallison Pereira Melo) #63589
• [cd776fe97c] - quic: fix infinite loop if STOP_SENDING received on a buffering stream (Tim Perry) #64715
• [4f6eda3c23] - repl: keep entries added while history file is loading (Mhayk Whandson) #64513
• [cd1e6ce29b] - repl: add benchmarks (Aviv Keller) #64590
• [2ba740669d] - sea: avoid dangling CLI option pointers (Archkon) #64755
• [ec5e2d6856] - sea: handle NUL bytes in asset keys (Archkon) #64773
• [703b854293] - sea: reject trailing content in config JSON (Archkon) #64774
• [a61a5fdd1c] - sqlite: prevent reentrant session.close() (Trivikram Kamat) #65349
• [6ae81be0a3] - sqlite: reject statement-less SQL in prepare() (Trevor Burnham) #65157
• [043dfe4996] - sqlite: reject statement-less SQL in SQLTagStore (Trevor Burnham) #65157
• [b8faee02e1] - sqlite: check null returns from sqlite value functions (Nora Dossche) #63288
• [d6d2a71bee] - sqlite: validate maxSize argument in createTagStore() (Anshika Jain) #63792
• [61a046309f] - sqlite: reject non-positive backup rates (Trivikram Kamat) #64893
• [514e3f30fb] - sqlite: clear SQLTagStore bindings (Matteo Collina) #65041
• [c1542255b8] - sqlite: bind Boolean (mike-git374) #62001
• [cdb732beb5] - sqlite: fix undefined behaviour in Session::Changeset() (Nora Dossche) #63637
• [fbe8861111] - sqlite: bind ArrayBuffer (mike-git374) #62061
• [e3c6bd6bc8] - src: add missing vector include (Filip Skokan) #65622
• [793cf69df8] - src: fix heap value deduplication in embedder graph (Ilyas Shabi) #64801
• [ea5935b04c] - src: fix out-of-bounds write when transcoding odd-length ucs2 (nashit hayat) #64512
• [22e5023f4d] - src: escape Windows environment variables in task runner (Antoine du Hamel) #65217
• [a0f3c62bd9] - src: simplify c++ diagnostics channel API (James M Snell) #65158
• [8e831a3d2e] - src: make minor cleanup to permission checks (James M Snell) #65158
• [968b2ca3a3] - src: use DictionaryTemplate for permission diag channel message (James M Snell) #65158
• [18e16e7f8d] - src: cache permission strings (James M Snell) #65158
• [c8625a4b6f] - src: add SetAbortHandler (Max H Fisher) #64684
• [c990140d60] - src: match cmd.exe case-insensitively in task runner (Archkon) #64907
• [d7463b9dbc] - src: reuse cached env strings in remaining files (Seongeun Lee) #65039
• [b055a43b93] - src: expose Windows-only fs open flags (Kirill Saied) #64775
• [7f21e37496] - src: report why --enable-fips failed (Filip Skokan) #64979
• [8c11beae27] - src: update repeated use strings to env (James M Snell) #64760
• [9e2c477e26] - stream: normalize fused stateless transform results (Trivikram Kamat) #65367
• [107e96dd41] - stream: encode whole chunks in TextEncoderStream (Matteo Collina) #65414
• [164068279b] - stream: prevent share from eagerly draining source (Trivikram Kamat) #65338
• [93d822bdc1] - stream: drain pending writes before broadcast end (Trivikram Kamat) #65334
• [6b8b9c362f] - stream: reuse unexposed managed read buffers (GetThatCookie) #64990
• [4ec4fab367] - stream: avoid duplicated endReadableNT scheduling (Matteo Collina) #65310
• [86d1196ebf] - stream: decouple transform backpressure changes (Matteo Collina) #65143
• [b8a7a75b19] - stream: reject pull on signal abort during flush (Trivikram Kamat) #65346
• [386ed6a06d] - stream: avoid leaking consumers on signal failure (Trivikram Kamat) #65299
• [74d53bd73b] - stream: use validateObject for zlib/iter params (greenhead) #65015
• [3a174ce16b] - stream: use validateNumber for BYOB reader options.min (greenhead) #65014
• [859ea01cb2] - stream: consolidate non-op algorithm callbacks (Matteo Collina) #65138
• [c577669825] - stream: cut promise churn in webstreams hot paths (Matteo Collina) #65138
• [d631e910db] - stream: preserve falsy cancellation reasons (Trivikram Kamat) #64705
• [f9c21eabbd] - stream: use validateBuffer for BYOB reader view (greenhead) #65046
• [b89c8f5d1e] - stream: fix recursive WritableStream abort (Jeong SeokChan) #64825
• [39e0457e86] - test: fix link-local dgram scope assertion (Filip Skokan) #65629
• [1433cf9d5b] - test: account for varied OpenSSL CCM final behaviours (Filip Skokan) #65542
• [7d135d24b7] - test: convert forEach to for of test-messageevent-brandcheck file (Nachiketa Pathak) #65279
• [421ee11715] - test: use spawnSyncAndAssert in windowsHide test (Junsoo Ha) #65351
• [929d5705bc] - test: remove test-debugger-run-after-quit-restart as flaky on macOS (Yuya Inoue) #65424
• [f38f154c14] - test: simplify test-timers-interval-promisified.js (Donghoon Kang) #65322
• [a98e27f2a9] - test: add Headers coverage and benchmark (Yagiz Nizipli) #65365
• [38fdbb62aa] - test: deflake test-net-listen-ipv6only (sangwook) #64173
• [06c7684b01] - test: use common/child_process spawnSync helpers (Junsoo Ha) #65377
• [6438c70004] - test: fix Linux debug skip in SEA test guard (구현우) #63751
• [fe0e4f1b65] - test: avoid timer race in event loop delay test (Trivikram Kamat) #64728
• [6ff69baea8] - test: enforce exit code in test-http-server-stale-close (Antoine du Hamel) #65198
• [ba87603016] - test: convert test-async-local-storage-bind to async loop (freida-code) #65270
• [8d6b89f454] - test: replace forEach() with for...of in parallel tests (Phillip Markert) #65272
• [a60572a7bb] - test: convert forEach to for in test-constant.js file (NIxxy25) #65271
• [f82060c6ce] - test: use for-of instead of forEach (Felix P.) #65268
• [5ded71f9cc] - test: cover realpathSync resolving symlinks after a FIFO stat (Hendrik Liebau) #65113
• [ac9835225e] - test: account for [EnforceRange] in test-webcrypto-prototype-pollution (Filip Skokan) #65173
• [550d24277e] - test: update WPT for WebCryptoAPI to 4c2fd05ed5 (Node.js GitHub Bot) #65150
• [2aa26559f0] - test: update WPT for urlpattern to 4832db4761 (Node.js GitHub Bot) #65151
• [d45c010108] - test: fix hidden error in test-http-server-stale-close.js (Meghan Denny) #59357
• [881f8d092d] - test: avoid deadlock issue in pipeline http2 tests to fix flakiness (Tim Perry) #65079
• [e4b1e3ee75] - test: allow half-open CONNECT tunnel sockets (Trivikram Kamat) #64973
• [00f4240d48] - test: update passphrases to comply with the next OpenSSL FIPS mode (Filip Skokan) #65077
• [cf7680efb7] - test: use libuv clock for immediate queue test (Trivikram Kamat) #64889
• [b0c12772ff] - test: increase timeout in probe-failure-hang-during-evaluate (Joyee Cheung) #64719
• [7e279104b4] - test: update WPT for WebCryptoAPI to 82c3d9069c (Node.js GitHub Bot) #64977
• [ac11f88d16] - test,doc: cover and document multi-byte offset/size in randomFill (kyungrae2002) #64834
• [67da38cada] - test_runner: match dotfiles in default coverage exclude (semimikoh) #63401
• [b06c61a08f] - test_runner: print coverage and diagnostic info with dot reporter (mag123c) #61423
• [7cb9c9c126] - test_runner: use run options with isolation="none" (Sylvester Keil) #62269
• [339acf4201] - test_runner: mock dual-package with conditional exports (Maruthan G) #62943
• [e7a68bca08] - test_runner: add classname hierarchy for JUnit reporter (mag123c) #60220
• [6a248acefe] - test_runner: fix junit report on empty diagnostic (Lazizbek Ergashev) #65357
• [d01dda79b6] - test_runner: do not tag-filter test file wrappers (Chemi Atlow) #65170
• [32ead10ddd] - test_runner: fix env option validation (Jihwan) #64865
• [b0ef155440] - tls: throw on invalid ALPNProtocols instead of aborting (Sankalp Thakur) #65076
• [dcf65c50ce] - tls: fix authorized state on no-cert TLS1.3 client cert resumption (Tim Perry) #64677
• [b0f54bda78] - tools: improve commit queue failure comment (Filip Skokan) #65433
• [bc1f2718d5] - tools: fix max body length handler in create-release-proposal.sh (Antoine du Hamel) #65455
• [bbe76516a9] - tools: bump brace-expansion in /tools/clang-format (dependabot[bot]) #64984
• [67697debdf] - tools: make env variables consistent in cron jobs (Antoine du Hamel) #65168
• [ac8a68ec92] - tools: only include fast-tracked and old enough PRs in CQ (Antoine du Hamel) #65197
• [6d9999fa2e] - tools: remove skip logic in commit-queue.sh (Antoine du Hamel) #65162
• [60bfa1694e] - tools: bump js-yaml from 4.2.0 to 4.3.1 in /tools/lint-md (dependabot[bot]) #65129
• [782748527e] - tools: bump js-yaml from 4.2.0 to 4.3.1 in /tools/eslint (dependabot[bot]) #65130
• [dac257340f] - tools: fix GITHUB_TOKEN permissions for CQ workflow (Antoine du Hamel) #65192
• [e624785846] - tools: use the read-only token when filtering PRs in CQ (Antoine du Hamel) #65169
• [7d9dcfaaa7] - tools: delay removal of commit-queue label (Antoine du Hamel) #65101
• [0d7c7936e7] - tools: move ncu config to global for commit queue (Filip Skokan) #65132
• [5e1db5a38a] - tools: prefilter commit queue metadata (Filip Skokan) #64343
• [f41509b91d] - tools: lazy-abort failed PR merges in CQ (Antoine du Hamel) #65004
• [ceb0e99acd] - tools: sync mk-ca-bundle.pl with curl (Archkon) #64753
• [600663b23f] - tty: add raw-vt and io raw modes (Samuel Williams) #64140
• [a40bfc742e] - typings: add signal_wrap internal binding types (Seongeun Lee) #65229
• [b103a4a3b9] - typings: add diagnostics_channel typings (Seongeun Lee) #65227
• [e64de34b89] - typings: add watchdog internal binding types (Seongeun Lee) #65228
• [c57c83b4d1] - typings: add internal_only_v8 binding typeis (Donghoon Kang) #65071
• [f15e8c9dcd] - typings: add credentials internal binding types (Donghoon Kang) #65036
• [a500256b0b] - url: skip unused href reuse comparison (Yagiz Nizipli) #65361
• [58390f8bec] - url: speed up WHATWG URL parsing (Yagiz Nizipli) #65361
• [7d5428c812] - url: speed up URLSearchParams (Yagiz Nizipli) #65363
• [8e2461d819] - url: bounds-check short Windows file URL paths (Archkon) #64788
• [9ffc0da90c] - url: handle unparsable serialized URLs in setters (Matteo Collina) #64651
• [fa9d4e075d] - util: allow single-line format when break length is infinite (Hamid Reza Ghavami) #64238
• [b68a7c3862] - util: fix OSC 8 hyperlink stripping in stripVTControlCharacters (Dushyant Singh Hada) #64319
• [10cbb6dc00] - util: fix formatting of functions returned from getters (Richard Gibson) #64839
• [64c20b449e] - util: use more primordials in comparisons.js (Ayoub Mabrouk) #61198
• [cea9786de8] - util: preserve function names without source map names (Hiroki Osame) #65108
• [35c635b032] - (SEMVER-MINOR) util: add non-throwing MIMEType.parse (James M Snell) #64965
• [5858c2ba9a] - zlib: validate pledgedSrcSize for sync zstd (Archkon) #64601

Notable Changes

• [616bd3fa26] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #65593
• [ae1801eb55] - meta: refine the security vuln posture for experimental features (James M Snell) #65438
• [09feba74c8] - deps: update Undici to 8.10.2 (Node.js GitHub Bot) #65788
• [7efdbe3eb9] - deps: update OpenSSL to 3.5.8 (Node.js GitHub Bot) #65542

Commits

• [d8aedd6584] - build: skip dockit on riscv64 (Stewart X Addison) #62251
• [1899c274eb] - build: activate correct default flags for riscv64 (Stewart X Addison) #65708
• [ec8a3be996] - build: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) #65491
• [b73118a507] - build,win: remove LTO parallelisation limit (Stefan Stojanovic) #65535
• [09feba74c8] - deps: update undici to 8.10.2 (Node.js GitHub Bot) #65788
• [e47c432dd6] - deps: upgrade npm to 11.19.1 (npm team) #65573
• [2fd6ce36a9] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
• [49dec2767a] - deps: update googletest to 36ba75f0ad5383a9759f17f3f72fd4661c72cb6d (Node.js GitHub Bot) #65654
• [676174a071] - deps: update simdjson to 4.6.9 (Node.js GitHub Bot) #65655
• [2f1b7fa0bb] - deps: update perfetto to 58.2 (Node.js GitHub Bot) #65656
• [12acd0ad15] - deps: update zlib to 1.3.2.1-motley-5eb4d7e (Node.js GitHub Bot) #65494
• [48631c80fb] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542
• [7efdbe3eb9] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542
• [bdc75900ee] - doc: replace node:modules documentation header (René) #65800
• [44c8a499ba] - doc: clarify return type of fs.mkdtemp* (Antoine du Hamel) #65743
• [025fb5eeb0] - doc: update changelog-maker instructions for releasing (Juan José) #65707
• [5f64847afa] - doc: add stability status to crypto.setEngine (Antoine du Hamel) #65746
• [299dee0cb9] - doc: remove outdated TLS authorized warning (Tim Perry) #65597
• [e97dcc0278] - doc: fix broken using link in ffi.md (Soul Lee) #65632
• [2c9cc7d237] - doc: fix some broken links (Antoine du Hamel) #65583
• [0c330ec329] - doc: fix stale TOC in maintaining-dependencies (greenhead) #65523
• [9c522a3a69] - doc: refactor the AI guidelines (Joyee Cheung) #65269
• [46cbf1bf8c] - doc: fix triggerAsyncId() comment in async_hooks example (soreavis) #64583
• [788904ff78] - doc: fix fsPromises.watch overflow value (Matt Radbourne) #64605
• [3d06ff19e8] - doc: clarify stream direction in options.stdio note (Avocado) #65236
• [d334838379] - doc: clarify signal listener behavior (Som Samantray) #65243
• [d55a2bd56a] - doc: add test reporter event lifecycle diagram (sangwook) #63780
• [c17dfc87de] - doc: discourage AbortSignal cleanup for long-lived resources (Efe Karasakal) #64342
• [616bd3fa26] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #65593
• [4e6d7e0ca6] - meta: cleanup targos emeritus changes (Antoine du Hamel) #65738
• [a70cfe1747] - meta: bump github/codeql-action/init from 4.37.3 to 4.37.9 (dependabot[bot]) #65714
• [e43a0ad4ce] - meta: bump github/codeql-action/autobuild from 4.37.3 to 4.37.9 (dependabot[bot]) #65717
• [99e06288f1] - meta: bump actions/checkout from 7.0.0 to 7.0.1 (dependabot[bot]) #65718
• [89662762b3] - meta: bump cachix/install-nix-action from 31.11.0 to 31.11.1 (dependabot[bot]) #65719
• [6b8f078672] - meta: bump actions/setup-node from 6.4.0 to 7.0.0 (dependabot[bot]) #65720
• [6c6fb18e63] - meta: bump step-security/harden-runner from 2.20.0 to 2.21.0 (dependabot[bot]) #65721
• [0e002e859f] - meta: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.9 (dependabot[bot]) #65722
• [98aaffe4b9] - meta: bump github/codeql-action/analyze from 4.37.3 to 4.37.9 (dependabot[bot]) #65723
• [d247cb2975] - meta: document collaborator automation (Filip Skokan) #65671
• [ae1801eb55] - meta: refine the security vuln posture for experimental features (James M Snell) #65438
• [fab81d15c3] - test: widen the gap in the resolver maxTimeout comparison (Shelley Vohr) #65780
• [62e2a6265c] - test: fix the thread-spawn handshake in the WASI threads fixture (Shelley Vohr) #65780
• [7eb20b1810] - test: only count restarts after the write in watch emit-restarted test (Shelley Vohr) #65780
• [14c3a77bc5] - test: ignore tunnel resets in proxy invalid-char-in-url test (Shelley Vohr) #65780
• [ebc99e0560] - test: handle EPIPE in closed channel test (Christian Aurich) #65770
• [5e73a2ca79] - test: deflake test-permission-net-udp-handle (Christian Aurich) #65767
• [beb669f7de] - test: deflake test-runner-coverage (Christian Aurich) #65728
• [ef4b6bfa62] - test: set type=none on IBM i for empty source (Abdirahim Musse) #65545
• [027eef0691] - test: deflake WASI poll timing checks (Filip Skokan) #65672
• [a352b0e2fe] - test: skip fs-watch-recursive-delete-race on AIX (Antoine du Hamel) #65698
• [f9ce35aa43] - test: deflake test-inspect-async-hook-setup-at-inspect (Christian Aurich) #65584
• [32281cec7b] - test: deflake test-watch-mode-restart-esm-loading-error (Christian Aurich) #65623
• [79be5d61be] - test: avoid orphaned child on Windows abort test (Kirill Saied) #65451
• [8972b8540b] - test: fix link-local dgram scope assertion (Filip Skokan) #65629
• [b7cd1d96de] - test: riscv64: skip node-api sea test (Stewart X Addison) #65569
• [7eeb9d0e57] - test: mark platform-specific tests as flaky (Filip Skokan) #65562
• [649ac82bda] - test: account for varied OpenSSL CCM final behaviours (Filip Skokan) #65542
• [050fb1a15d] - tools: bump @humanfs/node from 0.16.7 to 0.16.8 in /tools/eslint (dependabot[bot]) #65757
• [5314dda396] - tools: bump browserslist from 4.28.4 to 4.28.8 in /tools/eslint (dependabot[bot]) #65758
• [5938a08929] - tools: do not hardcode yamllint path (Antoine du Hamel) #65747
• [d8408f7415] - tools: refine contributor guidance workflow (Filip Skokan) #65745
• [196e372b69] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #65716
• [7e986b09f6] - tools: do not flag force push as invalid message (Antoine du Hamel) #65700
• [837ce2ccef] - tools: do not hardcode path to Ruff (Antoine du Hamel) #65681
• [1c7149a96a] - tools: retry first-time contributor query (Filip Skokan) #65648
• [bd310a2bea] - tools: query first-time contributor status (Filip Skokan) #65592
• [ab7b57e547] - tools: offset GitHub crons by 3 minutes (Michaël Zasso) #65612
• [62ece28eae] - tools: label PRs lacking second approval (Filip Skokan) #65538
• [68227b4029] - tools: welcome first-time contributors (Filip Skokan) #65533
• [490dc93e37] - tools: enable concurrency for eslint (Huáng Jùnliàng) #62352
• [d794676217] - typings: fix fs_event_wrap start filename type (leah-1ee) #65661
• [29e2b5a325] - typings: add fs_event_wrap internal binding types (leah-1ee) #65661
• [6357c8f56e] - typings: add stream_pipe internal binding types (Seongeun Lee) #65664
• [569720ac7f] - typings: add profiler internal binding types (Seongeun Lee) #65660
• [52ae89c69d] - typings: add ffi internal binding types (Donghoon Kang) #65734
• [22c7469062] - typings: update zlib binding declarations (이혜미) #65639

Bug Fixes

• guard client lookups against prototype pollution (830e364)
• properly export options (37f8a32)
• properly handle upgrade failures (7a33d9b)
• skip side effects when lock acquisition fails (1d4269c)

Diff: https://github.com/socketio/socket.io/compare/@socket.io/cluster-engine@0.1.0...@socket.io/cluster-engine@0.1.1

What's changed

• Added user.email and user.groups to the telemetry Claude Desktop and Cowork send through a Claude apps gateway, matching terminal sessions
• Added support for pointing --plugin-dir at a folder of plugins: each child folder with a manifest loads, and children added or removed while running are picked up
• Added a 1 GB cap on tool results saved to disk; the in-conversation preview says when a saved file was truncated
• Fixed resuming a foreground-spawned subagent changing its tool list and system prompt prefix, which broke prompt-cache reuse for that agent
• Fixed agent teammates and resumed subagents moving SubagentStart hook context and preloaded skills out of the prompt prefix on later turns, which broke prompt-cache reuse
• Fixed resume after the previous process died while a tool was running: the last prompt is no longer rewritten, and the interrupted tool call is kept and marked interrupted
• Fixed /model opusplan[1m] being rejected with "Model not found"
• Fixed syntax-highlighted code in permission prompts and messages sometimes omitting a character after a Ruby ?, Erlang $, or Perl $ sigil
• Fixed the fullscreen transcript jumping by one row whenever the slash-command or @-file suggestion list opened or closed
• Fixed a plugin path containing a backslash bypassing the symlink containment check on macOS and Linux
• Fixed plugin directories whose names begin with two dots being wrongly refused as outside the plugin root
• Fixed VS Code and SDK sessions occasionally requiring re-login when a session was closed while refreshing its token
• Fixed Remote Control sessions sending the end-of-turn signal before the reply's last message, which could show a reply as finished in the Claude app before its last part arrived
• Fixed background (--bg) sessions occasionally being retired mid-turn when a message arrived just before the idle timeout
• Fixed Claude Code's own git status and diff probes running clean filters configured by a nested repository inside the working tree
• Fixed the advisor tool and its instructions being re-decided per request from the request's model; the decision is now made once and announced in the conversation when it changes
• Fixed artifact publish accepting connector tool names the connector doesn't expose; the publish is now refused when none of the declared tools exist, and warned when only some don't
• Fixed /add-dir <subdirectory> refusing to load a subdirectory's agents when managed settings lock only skills to plugins, and promising agents when only agents are locked
• Fixed two-key keyboard shortcuts cancelling silently when the second key arrived more than a second later, as happens inside tmux; they now wait 3 seconds and show a notice when they time out
• Fixed forked skills (context: fork) not streaming their kickoff prompt and, with --forward-subagent-text, their text turns as progress events in stream-json
• Fixed a plugin's default component folder that the OS cannot check, such as a symlink loop, being silently skipped; it is now reported in /plugin with the error code
• Fixed the Claude apps gateway's OTLP telemetry relay pausing all forwarding to a collector for 30 seconds after it rejected a few payloads as malformed or too large
• Fixed /plugin Discover/Browse and claude plugin list --json --available showing no description or display name for marketplace plugins whose metadata lives only in their plugin.json
• Fixed /login showing "no gateway URL is configured" when re-run in a session that signed in to a Claude apps gateway set by managed settings
• Fixed /model claiming a model was "saved as your default" when the settings file couldn't be written; it now says the save failed and why
• Fixed /clear from Remote Control waiting on SessionStart hooks and on open terminal dialogs before completing
• Fixed the /config dialog changing height when switching between its tabs
• Fixed resuming a workflow run after its container restarted; a resume whose run journal is missing now fails with a clear error instead of rerunning every agent
• Fixed the claude-api skill's error-code reference: model access failures return 404 and unavailable beta headers return 400, not 403
• Fixed non-interactive sessions (-p with stream-json input, Agent SDK, cloud sessions) resetting the shell working directory at each new user message; a cd now persists across turns
• Fixed MCP servers configured as http that only speak the legacy HTTP+SSE transport never connecting; Claude Code now falls back to SSE as the MCP spec describes
• Fixed some claude.ai connectors in cloud sessions showing as needing authentication even though they are connected in claude.ai (servers that answer an unsupported request with HTTP 401)
• Fixed remote sessions keeping their sandbox container alive while a connector approval or sign-in link waits for you
• Fixed resumed sessions showing long model-facing recovery instructions in "background task didn't finish" notices instead of a short status line
• Windows: Fixed Read, Write and Edit refusing every file ("symlink resolution changed after permission was checked") when running inside an AppContainer or restricted-token sandbox
• Improved --worktree startup on large repositories: the new worktree is now checked out in parallel (git 2.32+)
• Improved /workflows agent detail: tool calls are marked running, failed or done, the subagent's task list is shown when it has one, and Enter unfolds the listed calls with their inputs and results
• Improved slash commands typed mid-prompt: matches now show in a list (Tab opens it outside fullscreen) instead of a single suggestion, and a plugin skill is now found by its bare name
• Improved remote MCP servers that need sign-in: Claude Code no longer registers an OAuth client with them until you actually authenticate
• Improved the time to resume long sessions that read many files
• Improved the error shown when an image over the size limits cannot be decoded: it now names the cause and how to fix it instead of only citing the limit
• Improved the Artifact tool's read of an artifact someone else wrote: the summary now treats the page as untrusted content and flags embedded instructions rather than relaying them
• Updated the .claude folder permission option to say what it actually allows: editing files in the project's .claude folder (or ~/.claude) for the session
• Changed machines with forceLoginGatewayUrl in managed settings to be Claude apps gateway sessions from startup, like forceLoginMethod: "gateway"; a leftover claude.ai login or API key is not used
• Changed image processing to use the runtime's built-in image support; the CLI no longer extracts a native image module to the temp directory
• Changed plugin display metadata to prefer the marketplace entry over plugin.json on the Installed tab and claude plugin details, filling gaps from plugin.json
• Changed Claude apps gateway sessions to export OpenTelemetry directly to a collector the gateway's managed settings name in OTEL_EXPORTER_OTLP_ENDPOINT, instead of through the gateway's relay; sessions without a named collector still use the relay
• [VSCode] Added automatic archiving of sessions inactive for a set period (new "Archive inactive sessions" setting, default 14 days)
• [VSCode] Fixed the sidebar chat coming back blank after Reload Window or a restart when the conversation had been open for more than 10 minutes
• [VSCode] Fixed the timeline dot sitting below the text on the "Remote Control is active" message

What's changed

• Added maxEffortLevel setting (top-level or per model under modelSettings): caps the effort level on every provider, including Bedrock, Vertex and Foundry; users can still pick a lower level
• Added --system-prompt-snapshot off to render the system prompt fresh on every request instead of reusing the conversation's recorded prompt (for iterating on prompt text)
• Fixed Cowork scheduled tasks in the cloud failing at startup for organizations whose managed settings require sandboxing
• Fixed /context and other local command output rendering blank on mobile clients
• Fixed shift+enter and option+backspace not working after reconnecting to a tmux or ssh session inside an agent view
• Fixed the dim last-prompt header not appearing at the top of the conversation when scrolling up in fullscreen mode
• Fixed Workflow agent() calls with large output schemas being refused in auto mode instead of being checked by the safety classifier
• Fixed a case where a marketplace entry path containing a backslash could bypass the containment check for fetched marketplaces on macOS and Linux
• Fixed expired AWS or Google Cloud credentials under a host app such as Claude Desktop retrying ten times with a generic "request failed" before the re-authenticate error appeared
• Fixed resuming a session after /compact or another slash command ran via -p --resume: a spurious "Continue from where you left off." turn is no longer inserted
• Fixed resuming a large session (transcript over 5 MB): parallel tool calls and their hook output are no longer dropped from the reloaded conversation
• Fixed managed allowedHttpHookUrls, httpHookAllowedEnvVars and allowedChannelPlugins to admit nothing, not everything, when unreadable
• Fixed /login on machines whose managed settings require Claude apps gateway sign-in: Esc now closes the dialog instead of doing nothing
• Fixed artifact publishes cut off by a dropped connection mid-upload: they now retry once when Claude Code can tell the upload never completed, instead of reporting an unknown outcome
• Fixed effort: frontmatter on custom commands, skills, and subagents being ignored on models whose default effort is still pinned (Opus 4.7, Opus 4.8, Fable 5)
• Fixed artifact publish failing with an unhelpful error when the page file isn't valid UTF-8 or contains a replacement character (U+FFFD); the error now names the line and column to fix
• Fixed claude agents @ directory menu not listing repositories created after the session started
• Fixed Remote Control clients that join a Claude Desktop or VS Code session showing a stale permission mode until it was changed again
• Fixed claude remote-control exiting and dropping every attached session when its server credential expires (about 30 days after start); the host now re-registers and keeps going
• Fixed the usage-limit warning flickering on and off during a session when requests for different models or modes report different limit windows
• Fixed earlier reasoning being dropped when an MCP server re-sends, or a built-in tool re-renders, a tool the model already loaded
• Fixed a tool that disappears mid-conversation, from a disconnected MCP server or an upgrade, rewriting the tool list and discarding earlier thinking
• Fixed a background worker forked from a conversation adding EnterWorktree to the conversation's tool block mid-session, which broke prompt-cache reuse
• Fixed mid-session MCP and plugin tools being added to the tool list in sessions without ToolSearch, which broke prompt-cache reuse; supported models now receive them as deferred definitions
• Fixed switching models with /model re-sending every tool definition (a prompt-cache miss); commit and PR attribution text now arrives as a conversation note that updates on model changes
• Fixed resumed sessions rewriting the inline tool set when an MCP connector reconnects at a different moment than before
• Fixed resumed sessions re-rendering tool descriptions instead of replaying the recorded ones when the first turn ran a tool
• Fixed prompt-cache misses and dropped extended thinking when a claude.ai connector's tools change between a session and its resume
• Fixed resumed sessions rewriting earlier MCP tool announcements (and dropping extended thinking) before their connectors reconnect
• Fixed a prompt-cache break when a print-mode (-p) conversation is resumed interactively: the system prompt prefix no longer changes
• Improved the /diff panel: it no longer flashes "0 files changed" and a spinner before settling, and its empty state is centered in the panel
• Improved the Bash tool's description guidance so Claude describes what a command does in plain words instead of echoing the command
• Improved sandbox guidance so Claude suggests /copy when clipboard commands such as pbcopy fail inside the sandbox
• Improved --resume first-render time for sessions with many Bash tool calls
• Improved prompt input responsiveness: keystrokes no longer occasionally wait a frame behind spinner or streaming repaints
• Improved prompt-cache stability: subagents and sessions started with --system-prompt or --append-system-prompt now record the system prompt and tool definitions once instead of re-rendering them
• Improved Artifact tool publish errors: when a publish is refused, the message now says why and what to do about it
• Self-hosted runner: Changed --use-anthropic-git-proxy to be reported to the server at registration and to print a warning for each session that still clones through the legacy git proxy
• Gateway: Changed forward_user_identity upstreams to return a 429 as-is to a developer whose email was forwarded, instead of failing over to the next upstream, so the proxy's per-user limits hold
• [VSCode] Fixed the extension host hanging at 100% CPU when forking, editing an earlier message, or rewinding in a conversation whose saved transcript contains a cyclic parent link
• [VSCode] Fixed pasting a screenshot on WSL2/WSLg inserting raw image bytes into the chat input; the image is now attached when the clipboard provides it, otherwise the paste is ignored
• [VSCode] Fixed chat diff blocks always rendering with a dark editor theme; they now follow the active VS Code color theme, including high contrast
• [VSCode] Fixed mixed right-to-left and English text rendering in the wrong order while typing in the message input
• [VSCode] Fixed accepting an edit in the diff view on a file with Windows (CRLF) line endings failing with "String not found in file"
• [VSCode] Fixed @-mentions dropping files whose paths contain spaces
• [VSCode] Fixed the sessions list view failing to load in windows connected over Remote-SSH when the workspace folder exists only on the remote host
• [VSCode] Fixed runaway ripgrep processes when viewing files in large or symlink-heavy workspaces
• [Claude Code on the web] Fixed GitHub Enterprise Server sessions showing your GitHub account as disconnected once its token expired; PR and issue operations now refresh it automatically
• [Claude Code on the web] Fixed gh and GitHub API calls failing in organizations without the Claude GitHub App; they now use your connected GitHub account and say so when none is connected
• [Claude Tag] Added a "Use a custom connector" link to the preset connection forms in Claude Tag admin settings, so you can switch to a custom connection without starting over
• [Claude Tag] Fixed Claude replying "The API rejected the request as invalid" when the organization has run out of usage credits; the reply now says so and explains how to add more
• [Claude Tag] Fixed thread requests to edit or delete a message Claude posted at the channel's top level being answered with a correction instead of reaching the session that posted it
• [Claude Tag] Fixed Connect on Tool access requests under Admin settings > Review requests failing with "Authorization failed" or showing the requested access bundle as deleted

What's changed

• Added to the Claude apps gateway: with pricing: set in gateway.yaml, signed-in Claude Code clients receive the same rates through managed settings, so /cost and telemetry match the spend meter
• Added a startup warning for gateways when access_control.allow_cidrs is empty, and a one-time warning the first time a request arrives from a public address
• Added the gatewayInternalNetworks managed setting, letting administrators allow /login to a Claude apps gateway on their organization's own public IPv4 block
• Added claude self-hosted-runner --remove-session-state (default off): delete each session's per-session directories under <base-dir>/_sessions/ when the session ends
• Added configDirectory to the output of claude auth status --json
• Added --json to claude plugin install, uninstall, update, enable and disable, and errorDetails/noteDetails to each row of claude plugin list --json
• Added browser-tab icons for published artifacts, chosen by Claude to match each page
• Fixed every turn failing with HTTP 400 on third-party Anthropic-compatible endpoints (ANTHROPIC_BASE_URL) since 2.1.265: a regex in the Artifact tool's input schema that those endpoints reject
• Fixed WebFetch hanging indefinitely on a server that keeps the response open without finishing; a fetch now fails after 300 seconds. Set CLAUDE_CODE_WEBFETCH_DEADLINE_MS to override the deadline (0 turns it off)
• Fixed a respawned in-process teammate picking up tools or a system prompt from a same-named agent file in a folder you have not trusted
• Fixed sustained high CPU usage: a busy loop in long-running idle sessions no longer pins a CPU core, and rapid terminal focus reports during a session recap no longer keep the CPU high
• Fixed Claude sometimes replying "your message came through empty" after an MCP tool call
• Fixed deny and ask permission rules on symlinked directories (/etc, /tmp, /var on macOS; /bin on Linux) not applying when a path was given by its real location, and Bash commands ignoring deny rules written on a symlinked path spelling
• Fixed a case where a Read or Edit deny rule did not apply when an env -C, eval or similar command the permission checker cannot analyze was on the same line
• Fixed plugin and marketplace errors showing a token or password from a git source URL
• Fixed /mcp and /plugin server details, claude mcp list/get, and MCP login errors showing secrets resolved from ${VAR} placeholders in MCP configs
• Fixed prompt caching and extended thinking breaking mid-session for SDK sessions using excludeDynamicSections: the first message is no longer re-rendered each request
• Fixed entitled users being told a model is restricted after restart or in the Desktop Code tab when a cached model-access denial was stale
• Fixed a running session silently switching to the organization's default model when another Claude Code process refreshed a stale model-access entry
• Fixed long-context 429s on Fable models showing the usage-credits consent prompt instead of the 1M-context message on Pro and Team plans
• Fixed workload identity federation via a profile (as claude-code-action configures it): processes sharing the profile could fail mid-run with 401 … jti reused
• Fixed MCP server OAuth sign-in failing with "No available ports for OAuth redirect" when the local callback port range can't be bound
• Fixed the conversation summary produced by /compact and auto-compact mangling text that contained $ sequences
• Fixed resuming a conversation that ended with /compact: its restored-file notes now load in the same order on every resume
• Fixed SDK prompt suggestions, side questions and /rename sending the conversation from before a compaction
• Fixed @ file and / command suggestions not appearing after recalling a previous prompt with the up arrow and editing it
• Fixed claude agents: pressing ← again at a natural pace to go back to the agent list no longer gets ignored until you pause for over a second
• Fixed claude agents session delete getting stuck when a worktree can't be removed: the message names the cause and next step, and for a git worktree ctrl+x again deletes the directory anyway
• Fixed background agent and workflow rows in the agents panel expanding to many lines when their text contained line breaks
• Fixed Claude in Slack sessions losing their Slack tools when org managed settings set an MCP allowlist
• Fixed Claude in Chrome asking to allow the host "https" when a navigation URL had a scheme but a host that could not be parsed
• Fixed the spinner wrapping onto several lines when the current task's label is long; the label and the "Next:" task line now stay within one terminal row
• Fixed the /bug and /feedback description field showing no cursor when the terminal's native cursor is enabled
• Fixed Remote Control sessions served by claude remote-control showing a generated name instead of their session title in ListAgents
• Fixed claude plugin validate rejecting plugin paths whose directory name begins with two dots, which the plugin loader accepts
• Fixed plugins silently skipping a default monitors file or root SKILL.md that could not be checked
• Fixed WebFetch's error for localhost and other dotless hostnames to explain why the URL is refused and suggest curl
• Fixed PermissionRequest hooks not firing in --print mode
• Fixed policy-helper warnings not printing on headless (-p) runs
• Fixed /resume listing a /fork background session under its parent's name instead of its own ⑂ fork name
• Fixed /remote-control and other claude.ai-gated commands to suggest /login when signed out instead of showing a Claude for Enterprise migration message
• Fixed CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS not extending SessionEnd hooks that have no per-hook timeout (they were still cancelled after 1.5 seconds)
• Fixed /autofix-pr and other cloud-session commands saying to retry or install the Claude GitHub App when no GitHub account is connected; they now point to /web-setup or the web connect page
• Fixed cloud-session commands such as /teleport and /remote-env to explain when an organization policy turns them off, instead of answering "Unknown command"
• Fixed Bash sandbox instructions over-stating confinement: no unenforced path lists when filesystem isolation is off, and strict mode no longer claims commands can never run unsandboxed
• Improved fullscreen mode: adding or removing a prompt line (Shift+Enter) now repaints as fast as typing a character instead of re-rendering the visible transcript
• Improved --continue / --resume: the conversation appears immediately instead of waiting for SessionStart hooks, and the first message no longer re-reads the whole transcript
• Improved responsiveness during tool-heavy turns by no longer redrawing the transcript for a hidden per-tool-batch reminder
• Improved startup time in projects with .claude/workflows/ scripts: listing them no longer parses each script
• Improved auto mode denials: the message Claude receives now names the rule that blocked the action and asks Claude to try a safer method and finish unrelated work before stopping to ask you
• Improved Claude in Chrome: long page reads now stay inline instead of being saved to a file and read back
• Improved the MEMORY.md truncation warning to say how many lines were cut and where the cut starts
• Improved the terminal permission prompt for artifacts: it now leads with the ask's question
• Improved the prompt footer: an editor or /diff selection now shows inside the prompt input, and fullscreen mode shows Remote Control status in the header instead of the footer
• Improved the "Usage credits required for 1M context" message to say that usage credits turned on mid-session take effect after restarting Claude Code
• Improved /plugin: installing, enabling or disabling a plugin now takes effect when you close the menu; /reload-plugins is no longer needed afterwards
• Changed the system prompt on Bedrock, Vertex and Foundry to deliver environment, model and settings details as attachments, matching first-party sessions
• Changed Bedrock, Vertex and Foundry sessions to keep the tool list byte-stable across a conversation (late-connecting tools load deferred instead of rewriting it), matching first-party sessions
• Changed the task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) to be offered only on Claude 3.x, Opus 4.0–4.7, Sonnet 4.0–4.6, Haiku 4.5; set CLAUDE_CODE_ENABLE_TODO_TOOLS=1 elsewhere
• Changed the artifact data-edit permission prompt in the terminal to a card that shows the document count and who can open the artifact
• Changed local Cowork sessions set to skip all approvals: the Artifact tool now refuses a local file outside the session's folders, or behind a symlink, instead of reading it without asking
• Changed plain WebFetch deny and ask rules to no longer apply to Artifact tool reads and updates; use an Artifact rule (or WebFetch(domain:claude.ai)) to block or gate them
• Changed the "N MCP servers need authentication" startup notice to announce each server once instead of at every launch
• [VSCode] Fixed the session list, settings toggles, and chat tabs when CLAUDE_CONFIG_DIR is set in a settings file or the environmentVariables setting
• [VSCode] Fixed the model pill, model picker and command menu going blank in open tabs for a few seconds after a login, logout or account switch
• [VSCode] Fixed Auto disappearing from the mode picker in new-tab or just-reloaded conversations when a project or local setting overrides the model named in ~/.claude/settings.json
• [VSCode] Fixed session names reverting to the last prompt after a window reload when a SessionStart hook is configured
• [VSCode] Fixed the footer's model pill and Remote Control pill waiting for the new tab's Claude process to start when another tab in the window is already up
• [VSCode] Fixed a second Claude process running through its full startup when a session tab's launch arrived more than half a second after its config read
• [VSCode] Fixed resuming a session from the session list ignoring claudeCode.preferredLocation: "sidebar" (it always opened a panel), and programmatic opens resetting that setting to "panel"
• [VSCode] Fixed Windows issues: the WSL install prompt no longer appears on machines without WSL installed, and IDE diagnostics are now returned correctly for Windows files when WSL is installed
• [VSCode] Fixed the custom style builder saving a User level style in a folder the CLI does not read when CLAUDE_CONFIG_DIR is set through settings
• [VSCode] Added Left and Right arrow keys to change where an always-allow permission rule is saved, for keyboard and screen reader users
• [VSCode] Added a "Claude Code: Focus last message" command that moves keyboard focus to the newest message in the conversation, for keyboard and screen reader users
• [VSCode] Changed the Manage plugins dialog to apply installs, enables, disables and uninstalls to open sessions without a restart
• [VSCode] Changed some artifact permission prompts to omit the "don't ask again" choice, matching the terminal
• [Claude Code on the web] Fixed cloud sessions running longer than about six hours silently losing files saved to persisted session folders; saves now persist for up to a day
• [Claude Code on the web] Fixed "Invalid effort level" errors when a routine resumes a session, or a session starts with no set effort, in orgs where an admin caps a model's effort
• [Claude Code on the web] Improved routine creation from a conversation: when the new routine has no connectors, Claude now says so and how to add them instead of only confirming it
• [Claude Tag] Fixed the admin settings page hanging on a loading skeleton or going blank after a transient load failure; a section that fails to load now shows a Retry button
• [Claude Tag] Added a link from a Slack channel's configure page back to the organization's Claude in Slack admin settings
• [Claude Tag] Fixed a Slack Enterprise Grid channel losing its Claude settings (repository, environment, access) after a Slack admin moved it to another workspace
• [Claude Tag] Improved how Claude explains a blocked action: it now says whether a permission check, its own decision to confirm first, or missing access stopped it
• [Claude Tag] Improved reply speed: Claude now runs several read-only lookups (searching Slack, reading a thread, finding people) at once instead of one after another
• [Claude Tag] Improved formatting of comparisons: sentence-length comparisons now come as lists instead of wide tables that scroll sideways, and long table cells wrap
• [Claude Tag] Fixed @Claude !restart in a thread with its own session sometimes also posting a contradictory "this thread is handled by the channel session" notice
• [Claude Tag] Improved the message shown when your Claude account is in a different organization than the Slack workspace: it now explains how to connect the workspace to your org
• [Claude Tag] Fixed Markdown links whose URL is wrapped in angle brackets showing as literal bracket text in Slack instead of a clickable link
• [Claude Tag] Fixed a workspace guest's top-level @mention in a channel where guests may use Claude sometimes getting a "your Slack account isn't connected" reply instead of an answer
• [Claude Tag] Fixed a channel's long-running session being replaced with a fresh one mid-conversation; the scheduled refresh now waits until the channel and its threads are quiet
• [Claude Tag] Fixed channel-settings cards clicked more than once telling the proposing session the change was refused after it had already applied; the outcome is now sent once
• [Claude Tag] Changed memory in public channels: each channel now keeps its own notes, and Claude no longer recalls notes it saved in other public channels; workspace notes stay shared
• [Code Review] Added a note under the still-open findings list in follow-up reviews: resolving a finding's thread, not just replying to it, stops later reviews from counting it as open
• [Code Review] Fixed reviews sometimes ending as incomplete when one of the agents verifying a finding failed midway; the review now replaces that agent and reaches a verdict
• [Code Review] Fixed a push-triggered review that was queued behind a running review still posting after the pull request had been converted to draft
• [Code Review] Fixed reviews ignoring a directory's CLAUDE.md conventions when the PR edited a root file (e.g. README.md) that only shares a name with a file that CLAUDE.md lists

openai: finalize responses at the web search limit (#18328)

openai: accept plaintext-labeled Codex agent messages (#18329)

proxy: normalize namespaced commands in Full Access (#18331)

openai: support standalone named function outputs (#18348)

This preview migrates Color Picker to WinUI 3, adds multiple Command Palette clocks, improves Keyboard Manager validation, and lets Awake turn off the display while Windows is locked.

Installer Hashes

Highlights

• Color Picker: Migrated the picker, editor, zoom magnifier, resources, and input hooks from WPF to WinUI 3.
• Command Palette: Added multiple configurable clocks with independent time zones and formats.
• Awake: Allowed Windows to turn off the display while the workstation is locked without changing unlocked keep-awake behavior.
• PowerDisplay: Added JSON Lines output and structured errors to the CLI for scripting and automation.

Awake

• Added lock-state detection so the display can turn off while the workstation is locked and Awake can resume its configured behavior after unlock in #49388 by @Meister1977.

Color Picker

• Migrated Color Picker from WPF to WinUI 3, including the picking overlay, editor, zoom magnifier, resources, telemetry, and input hooks in #49174.

Command Palette

• Added multiple configurable clocks with independent time zones, display formats, pinning, and centralized updates in #49288 by @jiripolasek.
• Fixed the Remote Desktop extension to filter and rank connections using the entered search text in #50043.
• Fixed dock item activation with Enter and Space in #50044.
• Preserved configured title and subtitle visibility when adding new dock items in #50363.
• Guarded dynamic-page event invocation against extension exceptions in #50390 by @jiripolasek.
• Prevented shortcuts from being handled twice for non-action keyboard hook notifications in #50427 by @jiripolasek.
• Corrected the description of the low-level keyboard hook setting in #50428 by @jiripolasek.

Keyboard Manager

• Fixed duplicate and conflict validation when editing remaps by comparing mapping identities and conditions instead of list positions in #50265 by @MasaYan24.

PowerDisplay

• Added a global --json flag for compact JSON Lines results and structured errors in #50433.

PowerToys Run

• Added the New Chat for Claude community plugin to the third-party plugin list in #50381 by @tit-exe.

Development

• Disabled Settings search-index generation in Debug builds to reduce build time in #49709 by @noraa-junker.
• Added Runner diagnostics for Windows session-end messages and decoded termination reasons in #50273.
• Made automatically selected per-module UI tests and their resolver blocking in CI in #50344 by @app/copilot-swe-agent.
• Migrated Hosts File Editor UI tests to UITest.Next and added missing release-checklist coverage in #50370.
• Added seven Registry Preview end-to-end tests covering editing, importing, Explorer preview, keyboard launch, and file registration in #50387.

This preview keeps Command Palette keyboard focus responsive, improves installer process cleanup, and expands end-to-end coverage for Environment Variables and Crop And Lock.

Installer Hashes

Highlights

• Command Palette: Prevented clicks on empty or non-focusable content from moving focus outside the shell and breaking keyboard shortcuts.
• Installer: Added missing CLI and helper processes to setup cleanup so active binaries do not block updates.
• Environment Variables: Added end-to-end coverage for user variables, profiles, overrides, PATH editing, and persistence.
• Crop And Lock: Added end-to-end coverage for thumbnail and reparent modes with unpackaged and packaged applications.

Command Palette

• Prevented ShellPage from losing focus when empty space or non-focusable content is clicked, preserving the search caret and keyboard shortcuts in #50448 by @jiripolasek.

Installer

• Added missing CLI and helper executables to the process termination list and made executable matching case-insensitive in #50452.

General

• Added recognition for the Shortcut Guide v2 contribution to the PowerToys community page in #50419 by @noraa-junker.

Development

• Added six Environment Variables end-to-end scenarios covering user-variable management, profiles, overrides, PATH editing, persistence, and state recovery in #50429.
• Added the first Crop And Lock end-to-end suite, covering thumbnail and reparent modes, packaged applications, module lifecycle, and selection cancellation in #50431.

This preview includes the latest features, fixes, and improvements since PowerToys Preview v0.101.2512.0.

Installer Hashes

Highlights

• Text Extractor: Migrated to WinUI 3 while preserving OCR behavior, activation, settings, mixed-DPI overlays, localization, and accessibility.
• Command Palette: Improved responsiveness by prioritizing visible and selected list items.
• Command Palette: Preserved search editing shortcuts in list and grid views.
• Window Hopper: Restored the overlay visuals and fixed backdrop, thumbnail, and icon rendering.
• ZoomIt: Added smooth zoom animations for more fluid transitions.

Command Palette

• Fixed list and grid views so search editing shortcuts work without moving selection, accepting suggestions, or processing keys twice in #50334 by @jiripolasek
• Added Dock display hints for stable item widths, right alignment, and tabular digits, improving dynamic Performance Monitor values in #50364 by @jiripolasek
• Improved responsiveness by prioritizing initialization of visible and selected list items over pending off-screen work in #50469 by @jiripolasek

Text Extractor

• Migrated from WPF to WinUI 3 while preserving activation, settings, OCR behavior, mixed-DPI overlays, localization, and accessibility in #49431

Window Hopper

• Restored overlay visuals while fixing acrylic backdrop behavior, thumbnail rendering, and icon sizing in #50494

ZoomIt

• Added smooth zoom animations for more fluid transitions in #50444 by @foxmsft

Development

• Expanded Workspaces end-to-end UI coverage across Settings, Quick Access, editor workflows, application capture, and launch scenarios in #50470

What's Changed

• Add container restart runtime support by beena352 in #41454
• Fix p9 drvfs read only mount regression by Feng Wang (@chemwolf6922) in #41487
• Fix WSLC Plan9 mount and image-build failures by Feng Wang (@chemwolf6922) in #41535

Full Changelog: 2.9.10...2.9.11

• Fix crashes with invalid lottie files.

• Fix some more crashes with bad lottie files.

• Fixed the live chat stream doubling text and dropping messages mid-turn. The sidecar has two Hub sockets that both receive a session's events — ClineCore's own client and the observer client — and a session that streams without a local send first (a run already in flight when you open the task, a resumed run, a scheduled run) had every delta rendered twice. The observer's copy is now skipped whenever ClineCore is subscribed to the session, asked directly rather than inferred from a timer, so long commands, slow first tokens, and unanswered tool approvals cannot let a duplicate slip through ahead of the core copy. Separately, when the sidecar was replaced under a live webview (crash-respawn, Hub drain-and-replace, stale-sidecar swap) its stream counter restarted at 1 and the webview silently discarded everything until the new process counted past the old run — this dropped your own message bubbles and tool rows, not just assistant text, which is why rows appeared to vanish mid-turn and come back afterwards
• Fixed a queued prompt's own message vanishing from the chat. When you queue a prompt behind a running turn, the runtime drains the queue just before it answers the previous send, so the previous turn's completion path replaced the whole transcript from a canonical read that predated your queued message — erasing your bubble and leaving the reply streaming in under no user message. That path now defers to the newer turn instead of treating the transcript as its own. Two symptoms rode on the same bug: the composer no longer drops out of its busy state while the queued reply is still pending, and a finished reasoning row now reads "Thought for Ns" instead of a stuck "Thinking" — live rows are stamped on the webview's clock, so a sidecar whose clock trails it (a remote Hub, the browser-dev setup) no longer produces a negative duration that gets dropped
• Cline no longer stops silently mid-task when a model gets stuck repeating itself. The loop detector stops a run after 5 identical tool calls and the mistake tracker after 6 consecutive failures, but the desktop never registered a decision callback, so the run just ended and the composer went idle with no message. You are now asked how to continue — "Try a different approach" or "Stop this run" — and the guidance is steered into the running turn so the model knows why it was paused instead of repeating the same call
• The editor tool's error message now names the file, says whether old_text was null or omitted, and states how to recover. Models that fill optional parameters with null (seen with kimi-k3) hit a terse "old_text is required" and re-sent the identical call until the loop detector stopped the run
• Fixed your Cline Pass model selection being replaced when you start a new chat. Catalogs are discovery data, not validation — the bundled catalog can omit live Cline Pass models and refreshes can return partial lists, so a model missing from the catalog was treated as invalid and silently swapped for a default
• Cline Desktop now has a custom title bar on Windows, with caption controls that follow the compact title-bar height in narrow windows and stay above overlays. The Windows taskbar icon was also updated
• Token counts and costs now fill in for every session you can see. The sessions view only ever hydrated the four most recent rows, so every other row showed "-" and paging never asked for more; the visible page is now hydrated on demand, with reads capped and re-run when a session's status changes underneath them
• Sessions imported from Claude Code, Codex, and opencode now say so in the chat, and their foreign history is summarized on the first resumed turn. Imported transcripts keep the source tool's own tool names and schemas, which a model continuing them may try to call — the summary runs once, the original transcript stays intact, and the "Thinking..." indicator reads "Summarizing the imported history..." while it happens
• Fixed session history rendering empty when one session had many subagent or team-task children. Child rows always sort after the root that spawned them, so a single busy session could hide itself and every older session from the sidebar with no way to load more
• Checkpoints no longer re-hash every untracked file before each message. Checkpoint creation rebuilt a throwaway git index each turn, so multi-GB untracked data blocked every message for seconds to minutes (~90s in one report on a cloud-synced Windows workspace). One snapshot index is now kept per session, so from the second turn the cost is roughly git process overhead. Snapshot contents are byte-identical to before
• Commands that background a child process (cmd &, nohup, and the same from Git Bash) no longer hang until the timeout. The inherited stdio pipes stay open after the shell exits, so the completion event never arrived even though the command was done; these now settle with the real exit code and a note that background output is no longer captured
• Typing an @ mention from your home directory no longer indexes your entire home folder. That could take memory into the gigabytes and get the process killed; the home directory and filesystem root are now skipped entirely
• Web search is now enabled by default outside YOLO mode, and tool settings fail closed if they cannot be loaded
• Claude Code no longer asks for an API key it never reads. It authenticates from the local claude CLI's own credential store, but was reported as an API-key provider, so a keyless entry was refused and the workaround was to save a dummy key
• Pasted credentials with invisible characters no longer persist corrupted. A BOM or zero-width character carried in from a copy-paste produced 401s indistinguishable from a wrong key; credential fields are now stripped of control and format characters on save
• Starting a new task no longer flickers through the idle state. The Hub publishes the new session's record as "idle" while the start request is still in flight, so the composer placeholder and the request indicator switched to idle and back for a frame on every new task. A transient idle arriving during a submission is now held back; a real failure or abort still applies immediately
• The model picker keeps section headers visible while you search. Cline Pass lists the same model in both the Subscribed and Free tiers, so flattening the sections during search produced two identical-looking rows
• apply_patch "Add File" now refuses to overwrite an existing file instead of silently replacing it
• Fixed session import paths resolving incorrectly on Windows
• The desktop backend now starts off the command path, so startup no longer blocks the UI
• The SDK can now connect to authenticated remote Hubs

Full Changelog: desktop-v0.0.23...desktop-v0.0.24

• This update introduces more granular settings to give you significantly more control over your Signal notifications. Now you can choose what appears on the app badge, adjust notification preferences for muted threads, and more! We also added a convenient button to restore the default notification settings if you ever make so many changes that you don't even know how to get ahold of yourself anymore.

• Small tweaks, bug fixes, and performance enhancements. Thanks for using Signal!

• Small tweaks, bug fixes, and performance enhancements. Thanks for using Signal!

Matomo 6.0.0-b1 (Pre-release)

We recommend to read this FAQ before using a pre-release in a production environment.

Please use the attached archives for installing or updating Matomo.
The source code download is only meant for developers and will require extra work to install it.

• Latest stable production release can be found at https://matomo.org/download/ (learn more) (recommended)
• Beta and Release Candidate releases can be found at https://builds.matomo.org/ (learn more)

Matomo 5.14.0-alpha.20260907180548 (Pre-release)

We recommend to read this FAQ before using a pre-release in a production environment.

Please use the attached archives for installing or updating Matomo.
The source code download is only meant for developers and will require extra work to install it.

• Latest stable production release can be found at https://matomo.org/download/ (learn more) (recommended)
• Beta and Release Candidate releases can be found at https://builds.matomo.org/ (learn more)

Matomo 5.14.0-alpha.20260908180608 (Pre-release)

We recommend to read this FAQ before using a pre-release in a production environment.

Please use the attached archives for installing or updating Matomo.
The source code download is only meant for developers and will require extra work to install it.

• Latest stable production release can be found at https://matomo.org/download/ (learn more) (recommended)
• Beta and Release Candidate releases can be found at https://builds.matomo.org/ (learn more)

Matomo 5.14.0-alpha.20260909180614 (Pre-release)

We recommend to read this FAQ before using a pre-release in a production environment.

Please use the attached archives for installing or updating Matomo.
The source code download is only meant for developers and will require extra work to install it.

• Latest stable production release can be found at https://matomo.org/download/ (learn more) (recommended)
• Beta and Release Candidate releases can be found at https://builds.matomo.org/ (learn more)

• test(update): require completed managed survivor proof

Propagate guarded survival failures, verify a real authenticated serving turn and persisted reply, and distinguish preserved migration metadata from refreshed runtime skills caches. Preserve strict pre-serving migration checks and companion fixture coverage.

• test(update): keep waiting for nonterminal serving observations

• test(release): model serving calls in survivor bootstrap fixture

• test(release): keep serving probe failures free of credentials

• test(release): preserve serving stage through volume idempotence

fix(release): bind source admission and retain first-hop coverage (#1…

fix(release): route Gateway load and preserve assertion ownership (#1…

fix(release): plugin previews fail with missing tooling dependencies …

fix(release): resolve nested bundled optional dependencies (#142126)

2026.9.3

Highlights

• Safer updates: rehearse core and plugin changes in isolated candidate state before activation, support eligible 2026.9.2 migrations, and recover abandoned update records without stopping a healthy matching Gateway. Related #136997. (#138839, #141109, #141175, #141562)
• Performance: preserve warm prompt caches, reduce unnecessary work during cold session updates and memory search, and reuse worker builds between sessions. Related #140681. (#140449, #140730, #140799, #140840, #141141) Thanks @justinkirklin-gif, @NianJiuZst, and @obviyus.
• Skill Workshop: keep skills in one persistent agent-owned collection across workspaces, compare complete skill instructions, and retire missing-draft suggestions safely through Doctor. Related #135291. (#135528, #139248, #140300, #141009) Thanks @khaisis and @obviyus.
• Browser tabs, live and native: watch agent pages repaint and open external links in native Mac tabs that remain with their window across chat switches. (#140988, #141031)
• Your provider accounts, together: manage connected accounts and supported account priority directly in Models settings. (#132451) Thanks @jesse-merhi.
• Share selected conversations: explicitly publish a revocable read-only view of a session’s existing and future conversation text, accessible to anyone with its public link. (#139489)
• A searchable meeting library: browse saved notes, search full transcripts, download complete Markdown or JSONL archives, and manage capture sources from the Control UI. (#139875, #140084)
• Optional team activity reports: install and enable Team Reports to browse authenticated GitHub activity and explicitly configured Discord discussion, with stored history and optional model summaries. (#139850, #141327)

Changes

• Breaking — Node runtime: require Node 24.16.0 or newer on 24.x, or Node 26.1.0 or newer; Node 26 is recommended. Upgrade Node before OpenClaw to prevent SQLite text truncation: Node 22, Node 25, and earlier 24.x/26.x builds are no longer supported. Node-based CLI/Gateway installs on macOS 11–13.4 or official Linux ARMv7 provisioning need a supported host; see Node requirements. (#140672)
• Breaking — execution-policy SDK: move the retired exec-mode and comparator helpers from infra-runtime to execPolicy on openclaw/plugin-sdk/agent-harness-runtime; use resolveExecModePolicy and select the returned fields needed by the caller. See runtime utility migration.
• Breaking — approval SDK: import approval account-resolution helpers from approval-native-runtime, adapt session filtering to the full matchesApprovalRequestFilters contract, and replace the retired generic forwarding evaluator with native channel route gates and shared predicates rather than assuming a drop-in alias. See SDK migration.
• Breaking — SDK aliases: replace channel-inbound.buildChannelTurnMediaPayload with buildChannelInboundMediaPayload; infer the retained abortAndDrainAgentHarnessRun callable’s result instead of importing the removed AbortAndDrainAgentHarnessRunResult named type. The callable and its result data remain available. See SDK migration.
• Breaking — search result callbacks: read bounded Find/Grep text from details.content instead of details.truncation.content; the outer tool-message content remains unchanged. (#140008) Thanks @ruel225.
• Breaking — directory result callbacks: use LsToolDetails.content and optional nextAfter in place of the retired truncation and entryLimitReached fields, and pass nextAfter as after to continue listing. See structured filesystem results.
• MCP prompt adapters: return the typed MCP GetPromptResult shape from SessionMcpRuntime.getPrompt, preserving its messages and image content; validate external responses instead of returning arbitrary unknown values. (#141421)
• Breaking — agent-owned Workshop skills: replace workspace ownership with one writable Workshop collection per agent and retire skills.workshop.allowSymlinkTargetWrites; startup and openclaw doctor --fix migrate proven legacy skills, while ambiguous ownership remains in place for review. (#135528) Thanks @obviyus.
• Bounded update repair: supported candidate-validation failures can enter a bounded repair phase using configured inference in disposable rehearsal state; activate only after independent validation, and retain failure or rollback outcomes when repair cannot recover. Changes requiring configuration edits are reported for operator repair. (#139495)
• Update failure reports: submit a report from the failed-update action only after explicit consent, using the recorded update attempt and current owner. (#139704) Thanks @fuller-stack-dev.
• Active sessions: show running and queued permitted sessions in Live activity on entry and reconnect, with a visible limit notice and connection status instead of claiming disconnected sessions are idle. (#141045) Thanks @shakkernerd.
• Code Mode composition: retain the running JavaScript environment across fast tool replies, add optional TypeScript checks against available tools, and report original-source error locations with bounded console output; explicit yields and resource limits still checkpoint execution. Related #141261. (#141265) Thanks @Takhoffman.
• Code Mode text encoding: provide sandboxed TextEncoder and TextDecoder instances that survive wait/resume for local text and byte transformations. (#140812) Thanks @Takhoffman.
• Private-session link previews: copy social-preview links that show a generic OpenClaw card without reading private session content; opening the conversation still requires its normal authentication. (#139250)
• Public session transcripts: session owners and Gateway admins can explicitly publish existing and future conversation text to anyone with a public URL and revoke access later; the read-only view omits tools, reasoning, files, images, and executable widgets. Review the text before enabling access; private-session preview links remain separate. (#139489)
• Repository-backed cloud sessions: create sessions from a repository URL and ref with checkout, setup, and recoverable checkpoints owned by the cloud node; materialize a Gateway worktree only when explicitly moving there. (#138900)
• Persistent sessions and subagent runs: keep persistent sessions created with visible spawning editable and steerable in their parent tree. Subagent runs remain view-only, omit author avatars, and keep live progress in the parent conversation with inactive cards paused. (#139367, #139371, #139381, #139456, #141499)
• Provider account controls: add and remove individual accounts, manage supported account priority, and clear an agent’s custom order without disconnecting accounts; inherited and provider-managed order remains explicit. (#132451) Thanks @jesse-merhi.
• Model fallback picker: choose ordered fallback models from a searchable dropdown, remove selections, and add custom references. Related #137410. (#141330) Thanks @najef1979-code and @shakkernerd.
• Prometheus runtime identity: identify the running process and loaded build behind metrics so operators can verify which runtime is serving a deployment. Related #139268. (#139280)
• Provider setup: keep provider detection passive until the user chooses a route, preserve consent and model choices through setup and OAuth failures, and leave generated catalog rows to discovery. Retain selected OpenAI credentials and supported Doctor model references; Baseten replace mode still includes the bundled catalog. Related #137033, #139207. (#137120, #139243, #139675, #139924, #139951, #140139, #140154, #140336, #141531, #141552) Thanks @LiuwqGit, @NovaUnboundAi, @obviyus, @shakkernerd, and @vincentkoc.
• Browser panel: watch Agent browser tabs repaint live, with screenshot fallback when streaming is unavailable. In the macOS app, open external links as native WebKit Mac tabs in the same Browser panel, with navigation and one-shot Annotate/Inspect capture; Mac tabs belong to their window and survive chat switches. (#140988, #141031)
• iOS voice shortcuts: open the current chat and start Talk with the Start Live Voice App Shortcut; pairing, provider setup, microphone permission, unlock, and foreground requirements still apply. Related #140998. (#141003, #141152) Thanks @shakkernerd.
• Team Reports: install the optional Team Reports plugin for authenticated daily, weekly, and monthly GitHub reports and explicitly selected Discord sources, with stored history, optional summaries, people timelines and calendars, coverage warnings, scheduler/source health, and theme-aware report pages. (#139850, #141327, #141384)
• Android folding layouts: keep content clear of separating hinges, show navigation beside content on book folds, and split transcript and composer across suitable tabletop panes while retaining drafts, cursor, and reading position; fall back when available space is insufficient. (#140614, #140710, #140802) Thanks @vincentkoc.
• Native embedded settings: provide phone-width settings with safe-area handling and Back navigation while retaining existing Gateway scopes and native device capabilities. (#139492)
• Telegram photo albums: group consecutive eligible photos into native albums of up to ten while preserving order, captions, reply targets, and topics; single photos and messages with controls retain individual delivery. (#141398) Thanks @obviyus.
• CLI and plugin discovery: limit displayed terminal or JSON documentation results with openclaw docs --limit, and let the system agent read installed-plugin inventory directly. Related #133122. (#131014, #133255) Thanks @Alix-007 and @shakkernerd.
• Recursive delegation: enable bounded recursive session spawning by default while retaining explicit depth and concurrency limits and existing sandbox restrictions. (#138059) Thanks @fuller-stack-dev.
• Chat navigation: add a previewable position rail for long conversations, including hover previews and direct jumps. Related #138587. (#138603) Thanks @brokemac79.
• Native dashboard reports: display bounded report data directly through show_widget and dashboard authoring without an iframe. Related #139263. (#139306)
• Chrome extension setup on Mac: request the official Chrome Store extension from the local Mac device settings or CLI after native setup is ready; Chrome still owns approval and uninstall decisions, and OpenClaw shows when setup remains pending. Related #139448. (#139466)
• CLI agents by default: show supported create-capable CLI agents in the new-session model picker without a separate opt-in; set gateway.cliAgents.enabled to false to disable CLI agents and native CLI session creation. (#139459)
• Device aliases: rename paired devices directly from the Control UI Devices page. Related #138099. (#138852) Thanks @xialonglee.
• Folder navigation: filter the folder browser immediately as you type a path. (#139417)
• Meeting archives: browse paginated saved notes, search transcripts, export complete Markdown or JSONL archives, and edit capture sources in Communications settings while retaining existing archive access controls. (#139875, #140084)
• Native desktop: provide ARM64 Linux AppImage packaging and live Gateway cards with direct window opening in the macOS Gateways menu. (#139522, #139688, #139729) Thanks @vincentkoc.
• Watch voice setup: include voice in normal Apple Watch setup. (#139712)
• Diagnostics: expose garbage-collection duration metrics and identify slow phases while opening agent databases. Related #139547. (#138125, #139592)
• Android usage: distinguish context pressure from cumulative latest-run usage, keep optional model-call details compact, and clear stale usage after compaction and history refresh. (#137494) Thanks @IWhatsskill.
• Installation-owned recovery: eligible failed updates and recorded startup failures can start a repair using existing authentication and permissions, with only one active repair per installation; verified cleanup, cancellation, and admission limits remain enforced, and recovery does not turn the original failed update into success. (#135868)
• Cloud setup diagnostics: report cloud bootstrap phase timings so provisioning delays are easier to locate. (#140442)
• macOS app Gateway control CLI: bundle openclaw-mac to inspect and configure the running Mac app’s primary and saved Gateway connections from Terminal or SSH, including browser sign-in, reconnect, removal, profiles, and JSON output. Browser sign-in still happens on the Mac; credentials enter through protected files or standard input.
• Gateway secret setup: use one Gateway secret field in Control UI and remote onboarding, and generate a local Gateway token by default without asking users to choose token or password. (#141511, #141514)
• Beam deletion: delete beamed sessions directly from their sidebar menu without affecting independent continuations. (#141467)