EILMELDUNGEN LIVE
⚠️ Malware / Trojaner / VirenPost-DEF CON phishing campaign delivered AMOS and NetSupport malware(24.08.2026 um 09:42 Uhr)
🕵️ SicherheitslückenOpenAI Astra Brings Autonomous Zero-Day Exploitation to AI(03.09.2026 um 00:31 Uhr)
🕵️ SicherheitslückenIT Security News Hourly Summary 2026-09-03 01h : 4 posts(03.09.2026 um 01:00 Uhr)
🕵️ SicherheitslückenIT Security News Hourly Summary 2026-09-03 08h : 6 posts(03.09.2026 um 08:00 Uhr)
⚠️ Malware / Trojaner / VirenPost-DEF CON phishing campaign delivered AMOS and NetSupport malware(24.08.2026 um 09:42 Uhr)
🕵️ SicherheitslückenOpenAI Astra Brings Autonomous Zero-Day Exploitation to AI(03.09.2026 um 00:31 Uhr)
🕵️ SicherheitslückenIT Security News Hourly Summary 2026-09-03 01h : 4 posts(03.09.2026 um 01:00 Uhr)
🕵️ SicherheitslückenIT Security News Hourly Summary 2026-09-03 08h : 6 posts(03.09.2026 um 08:00 Uhr)

29 🕛 kürzlich 5 Min Lesezeit CVE-RADAR
0

GitHub Release: can1357/oh-my-pi v18.1.5 (03.09.2026)

↗ Quelle (GitHub · can1357/oh-my-pi)
🗣️ Stimme:
GitHub Release: can1357/oh-my-pi v18.1.5 (03.09.2026)
📑 Inhaltsübersicht
Avatar
$ git clone https://github.com/can1357/oh-my-pi.git

@oh-my-pi/pi-ai


Added



  • Added /login abliteration with API key validation against /v1/models, supporting the ABLITERATION_API_KEY and ABLIT_KEY environment variables.


Changed



  • Modernized provider authentication and token refresh across the catalog, with shared support for API-key, authorization-code, and device-code sign-in flows and clearer sign-in progress messages for OpenRouter, Kimi, and xAI.


Fixed



  • GitHub Copilot now uses the official Copilot CLI identity and OAuth application for requests and new sign-ins, restoring access to client-gated models while preserving existing credentials.

  • GitHub Copilot now reports model_not_supported responses immediately instead of repeatedly retrying unsupported models.

  • Improved account recovery after Google rate limits are lifted earlier than the reported reset time.

  • Fixed unmetered autocomplete models being reported as exhausted when quota is limited.

  • Fixed Gemini 3 cross-model sessions in Cloud Code Assist when replaying tool calls without a thought signature.

  • Fixed Cursor models behind an authentication gateway incorrectly retrying valid client-declared tool calls.

  • Fixed reasoning from models that prefill <think> (including DeepSeek-R1 and hosted Qwen3-Thinking) being shown in the response instead of as a separate thinking block.


@oh-my-pi/pi-catalog


Added



  • Added the Abliteration (abliteration.ai) provider, including its documented abliterated-model catalog and live model discovery.

  • Added the GLM 5.3 Promo 50 model.

  • Added computer-use capability metadata to model configurations.

  • Added declarative provider authentication policies covering login, refresh, environment-key, and credential behavior, with generated compatibility data and typed accessors.


Changed



  • Gemini 3.8 Flash now supports reasoning modes and image inputs.

  • Updated the GitHub Copilot API version to 2026-08-01.

  • Reduced input pricing for the minimax/minimax-m2 model.

  • Renamed Meta Model API contributor SKUs to use the Muse Spark 1.x (C) naming.


Fixed



  • GitHub Copilot model discovery now respects the Copilot CLI identity, ensuring eligible enterprise and experimental models are available.

  • Fixed startup failures when discovering Bedrock-style Mistral Mixtral models.

  • Fixed Muse Spark 1.3 contributor models on OpenCode gateways so they use the correct Responses API route.

  • Updated Meta and OpenCode Muse Spark 1.3 model metadata and capabilities, including context windows, reasoning levels, image input, pricing, and model naming; media-only Muse SKUs are no longer presented as chat models.


@oh-my-pi/pi-coding-agent


Added



  • Added Abliteration provider support to /login, including ABLITERATION_API_KEY configuration and help text.

  • Added clone-first Git worktree support that carries over ignored build artifacts when creating worktrees, with a configurable worktree.clone setting and fallback to a standard checkout. This is supported by github pr_checkout, omp worktree add, and git worktree add commands entered through the Bash tool.

  • Added the omp worktree add command with Git-compatible branch, detach, path, and commit options.

  • Added /wt (alias /worktree) to create a linked worktree with uncommitted changes and move the current session into it while leaving the original checkout untouched.


Changed



  • Foreign user-level configuration sources (~/.cursor, ~/.codex, ~/.claude, ~/.gemini, ~/.config/opencode, ~/.codeium/windsurf) are now opt-in via enabledProviders, while project-level configurations in CWD and .agents continue to load by default.

  • Split subagent isolation configuration into task.isolation.enabled and isolation.backend; existing task.isolation.mode settings are migrated automatically.

  • Updated the built-in smol and slow model priority chains to favor newer recommended models and remove older model generations.

  • Improved unsupported-model error messages by removing retry guidance that does not apply.


Fixed



  • Fixed automatic title generation so --no-title also prevents todo-initialization title refreshes, while automatic titles retain the selected OAuth account without sharing foreground request identity.

  • Fixed provider errors so they wrap to the terminal width and remain readable in the transcript and pinned error banner, with long messages available through the expansion hint.

  • Fixed Gemini malformed function-call turns so textual tool-call output is rejected conversationally and the session can continue instead of stopping with a pinned error.

  • Fixed auto-compaction recovery getting stuck in repeated retries when models return empty length-limited responses; it now stops with an actionable error.

  • Fixed MCP servers failing to reconnect after transient startup handshake timeouts.

  • Fixed programs supervised by hub start hanging when querying terminal capabilities.

  • Fixed large pastes followed immediately by Enter so the input is submitted with the pasted content instead of being left in the large-paste menu.


Removed



  • Removed the bundled designer subagent and designer model role; modelRoles.designer and @designer are no longer built in.


@oh-my-pi/pi-natives


Changed



  • Updated worktreeAdd to support additional worktree creation options, including preserving uncommitted changes.


@oh-my-pi/pi-tui


Fixed



  • Fixed terminal query support in supervised PTY processes, including cursor position reports.

  • Fixed paste-and-submit handling so an Enter keypress received with a bracketed paste is delivered to the previously focused component; Editor.onLargePaste now receives PasteOptions describing the queued submit.


@oh-my-pi/pi-utils


Added



  • Added TerminalQueryResponder to @oh-my-pi/pi-utils/vterm, enabling headless PTY consumers to answer common terminal queries for cursor position, device status and attributes, and foreground/background colors without maintaining a screen buffer.


What's Changed



  • fix(mcp): retry transient startup handshake timeouts by

  • fix(cursor): acknowledge auth-gateway tool handoffs by

  • fix(compaction): bound response.incomplete recovery retries by

  • fix(catalog): resolve namespaced family ambiguity by

  • fix(ai): handled unsigned-first CCA tool calls by

  • fix(catalog): route opencode muse-spark-1.3 over responses api by

  • feat(catalog,ai,coding-agent): add Abliteration (abliteration.ai) provider by

  • fix(session): honor no-title during replan refresh by


Full Changelog: v18.1.4...v18.1.5

Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf github.com.
↗ Original-Artikel auf github.com lesen
Wie bewertest du diesen Beitrag?
1 Klick Feedback
Teilen mit Netzwerk & Team:

Community-Analysen & Experten-Meinungen 0

Verfasse deine eigene Analyse, teile Workarounds oder diskutiere diesen Vorfall im Blog.
Noch keine Community-Analyse verfasst. Markiere einen Textabschnitt oder klicke oben auf Eigene Analyse verfassen“!
Community Pulse: Relevanz-Einschätzung
1 Klick Experten-Votum
🔴 Akute Relevanz 39%
🟡 In Evaluierung 34%
🟢 Keine Auswirkung 16%
Spannende Innovation 11%
Verwandte Story-Cluster & Quellen (Vektor-KI)
Port 8095 Engine
1 Quelle
Researcher Claims CrowdStrike Falcon 0-Day Privilege Escalation Vulnerability
1 Quelle
Post-DEF CON phishing campaign delivered AMOS and NetSupport malware
1 Quelle
OpenAI Astra Brings Autonomous Zero-Day Exploitation to AI