/* Route-Critical (index, V6 §3.6.3 — erzeugt von tools/generate_critical_css.mjs) */ .collapse:not(.show){display:none}.navbar{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between}.navbar>.container-fluid{display:flex;flex-wrap:inherit;align-items:center;justify-content:space-between}.mydraft-svg-icon{display:inline-block;vertical-align:middle;color:currentcolor;flex-shrink:0;transition:color var(--duration-fast, 150ms) ease,stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}.mydraft-svg-icon circle,.mydraft-svg-icon line,.mydraft-svg-icon path,.mydraft-svg-icon polygon,.mydraft-svg-icon polyline,.mydraft-svg-icon rect{transition:stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}@layer components{.live-pulse-dot{width:8px;height:8px}}.min-w-0{min-width:0}@layer overrides{.live-radar-header-badge{background:rgba(239,68,68,.12);border:1px solid rgba(239,68,68,.35);color:#fca5a5;font-size:.75rem;font-weight:700;transition:.25s;cursor:pointer}}@layer overrides{.live-pulse-dot{width:8px;height:8px;background-color:var(--threat-critical,#ef4444);border-radius:50%;display:inline-block;box-shadow:rgba(239,68,68,.7) 0 0 0 0}}@layer overrides{body.light .live-radar-header-badge,html[data-bs-theme=light] .live-radar-header-badge{background:#fbd9dd;border-color:#eeb2b8;color:#8a1723!important}}.isharestuff-live-ticker{color:var(--color-text-body,#f8fafc);backdrop-filter:none;flex-wrap:wrap;row-gap:.3rem;background:var(--color-surface,rgba(15,23,42,.85))!important;border:1px solid var(--color-border,rgba(255,255,255,.12))!important;padding:.45rem .5rem!important;margin-bottom:.75rem!important}.ticker-content{mask-image:linear-gradient(to right,transparent 0px,rgb(0,0,0) 14px,rgb(0,0,0) calc(100% - 14px),transparent 100%);touch-action:pan-y;cursor:grab;user-select:none;-webkit-tap-highlight-color:transparent;order:1;width:100%;max-width:100%;flex:0 0 100%!important}.isharestuff-live-ticker .ticker-lead-group{order:2;width:100%;justify-content:space-between;margin-right:0!important}.ticker-track{display:flex;align-items:center;white-space:nowrap;will-change:transform;transform:translate3d(0,0,0);--ticker-speed:1;animation-name:isharestuffTicker;animation-timing-function:linear;animation-iteration-count:infinite;animation-duration:calc(26s / var(--ticker-speed, 1))}.ticker-link{max-width:min(78vw,340px);font-size:.82rem;display:inline-block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;vertical-align:baseline;transition:color .2s;color:var(--color-text-heading,#f8fafc)!important}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:44px;height:44px;font-size:.78rem;-webkit-tap-highlight-color:transparent}.ticker-controls-bar{gap:.4rem}.ticker-counter{font-family:var(--bs-font-monospace, ui-monospace, monospace);font-size:.72rem;line-height:1;color:var(--color-text-secondary,#94a3b8);min-width:3.4em;text-align:center;user-select:none;white-space:nowrap;margin-left:auto}.ticker-item{font-size:.82rem}.ticker-item .ticker-date{font-size:.72rem;vertical-align:baseline}.ticker-text-group{display:inline-flex;align-items:baseline}.ticker-badge-live-btn{border:0;cursor:pointer;text-decoration:none!important}.ticker-badge{font-size:.78rem!important;min-height:44px!important;min-width:44px!important;padding:6px 12px!important;display:inline-flex!important;align-items:center!important;justify-content:center!important}.signal-live-strip{display:flex;align-items:center;gap:.625rem;min-height:44px;margin-bottom:1rem;padding:.4rem .875rem;border-radius:9999px;border:1px solid rgba(var(--color-border-rgb,148,163,184),.35);background:rgba(var(--color-surface-rgb,15,23,42),.6);backdrop-filter:blur(12px) saturate(140%);overflow:hidden}.signal-live-badge{display:inline-flex;align-items:center;gap:.35rem;flex:0 0 auto;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.68rem;font-weight:700;letter-spacing:.08em;text-transform:uppercase;color:#fda4af}[data-bs-theme=light] .signal-live-badge,body.light .signal-live-badge{color:#be123c}.signal-live-dot{width:8px;height:8px;border-radius:50%;background:#f43f5e;animation:1.6s ease-in-out 0s infinite normal none running signalLivePulse}.signal-live-strip.is-online .signal-live-dot{background:#22c55e;animation:auto ease 0s 1 normal none running none}.signal-live-item{font-size:.82rem;line-height:1.35;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0}.menue-widget .nav-tree-link{min-width:44px;display:flex;align-items:center;word-break:break-word;overflow-wrap:anywhere;max-width:100%;min-height:44px!important}.menue-widget .nav-title-text{overflow-wrap:anywhere;word-break:break-word}.menue-widget .menue-widget-btn{min-height:44px;min-width:44px;display:inline-flex;align-items:center;justify-content:center}@media (min-width:992px){.navbar-expand-lg{flex-wrap:nowrap;justify-content:flex-start}.navbar-expand-lg .navbar-toggler{display:none}}@media (prefers-reduced-motion:reduce){@layer overrides{#news-popup,#news-toast-banner,.animate-pulse,.live-pulse-dot,.live-pulsing-dot,.news-item-card{animation:auto ease 0s 1 normal none running none;transition:none}}.ticker-track{animation:auto ease 0s 1 normal none running none!important}.ticker-content{cursor:default}.signal-live-dot{animation:auto ease 0s 1 normal none running none}}@media (min-width:768px){.isharestuff-live-ticker{flex-wrap:nowrap;row-gap:0;backdrop-filter:blur(12px);padding:.5rem!important;margin-bottom:1rem!important}.isharestuff-live-ticker .ticker-content{order:0;width:auto;max-width:none;flex:1 1 auto!important}.isharestuff-live-ticker .ticker-lead-group{order:0;width:auto;justify-content:flex-start;margin-right:1rem!important}.ticker-controls-bar{gap:.3rem}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:30px;height:auto;font-size:inherit}.ticker-counter{font-size:.66rem;margin-left:0}.ticker-track{animation-duration:calc(40s / var(--ticker-speed, 1))}.ticker-link{max-width:340px;font-size:.85rem}.ticker-item{font-size:.85rem}.ticker-badge{font-size:inherit!important;min-height:0!important;min-width:0!important;padding:.5rem 1rem!important}}@media (max-width:359.98px){.ticker-counter{display:none}.ticker-controls-bar{gap:.3rem}.ticker-badge{padding:6px 9px!important}}@media (max-width:767.98px){.signal-live-strip{flex-wrap:wrap;align-items:flex-start;border-radius:1rem;padding:.5rem .75rem;row-gap:.25rem}.signal-live-badge{margin-top:.1rem}.signal-live-item{white-space:normal;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;text-overflow:clip;overflow-wrap:anywhere;line-height:1.3}} 🔒 GitHub Release: can1357/oh-my-pi v18.11.3 (16.10.2026) | Admin & Dev Tools – TSECURITY.DE Zum Hauptinhalt springen
•••
IT NachrichtenTikTok bans Musk documentary account(17.10.2026 um 21:32 Uhr)
••
IT NachrichtenApple überholt Samsung bei Netzbetreiber-Verkäufen(17.10.2026 um 20:00 Uhr)
••••••••
IT NachrichtenTikTok bans Musk documentary account(17.10.2026 um 21:32 Uhr)
••
IT NachrichtenApple überholt Samsung bei Netzbetreiber-Verkäufen(17.10.2026 um 20:00 Uhr)
•••••
Intelligence View
⚡ tsecurity.de Intelligence

GitHub Release: can1357/oh-my-pi v18.11.3 (16.10.2026)

Release v18.11.3 von can1357/oh-my-pi auf GitHub: @oh-my-pi/pi-agent-core Added prepareQueuedMessages receives which queue (steering or followUp) a batch came…

Beitrag
0
Seite
0
↗ Quelle (GitHub · can1357/oh-my-pi)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
can1357/oh-my-piv18.11.316.10.2026@github-actions[bot]

@oh-my-pi/pi-agent-core


Added



  • prepareQueuedMessages receives which queue (steering or followUp) a batch came from (#16026)


@oh-my-pi/pi-ai


Fixed



  • Fixed JSON Schema dereferencing rewriting literal values in const, enum, default, examples, and custom annotations, or treating property names as schema keywords (#15927 by @jchanghong023).

  • Fixed Anthropic requests hanging forever on Bun 1.3 when the upstream accepted the request but never sent headers: aborting the request (including the first-event timeout) now fails it, so the turn retries instead of waiting until the user interrupts it (#16010 by @ca-io-systems)

  • Fixed the auth gateway's POST /v1/chat/completions streams being dropped (terminated) after ~255 s without upstream output, e.g. while xAI generates a large tool call's arguments, which arrive only when complete; the stream now sends an SSE : keepalive comment every 15 s (#15940 by @radkawar)

  • Fixed Anthropic models with mid-conversation system messages (e.g. Claude Opus 5.5) receiving @file mention contents and hidden extension messages as a trailing system message instead of ending the request on the user's turn (#15881)


@oh-my-pi/pi-catalog


Changed



  • Renamed the built-in google-antigravity login option to "Google Antigravity (Gemini, Claude, GPT-OSS)" so it is distinguishable from similarly named third-party plugins and no longer implies support stops at Gemini 3 (#15998 by @savanne-kham).


Fixed



  • Fixed Command Code's z-ai/glm-5.3-flash failing every request with "not available on this endpoint": the catalog routes it to chat completions, the only endpoint Command Code lists for it (#15922 by @jasonharrison)

  • Fixed /handoff failing with 400 Provider returned error on OpenRouter's hosted Muse Spark 1.x and Muse Wonder models: requests no longer send a tool_choice the upstream Meta backend rejects (#15910)

  • Fixed OpenCode Zen bringing back retired bundled models from an authoritative model cache, and dropping drop-listed models such as gemini-3.7-flash when a refresh fails after an upgrade (#15770 by @adi-IL)


@oh-my-pi/pi-coding-agent


Breaking Changes



  • Extension ui.approve() hosts receive an optional session choice label and answer "once", "session", or "deny" instead of a boolean


Added



  • Added imageCountBudget to custom models and modelOverrides in models.yml, so a custom gateway can state its host's image limit instead of the default of 5; past that limit the oldest images were dropped on every new image, which rewrote the provider's prompt cache (#15002, #15969 by @aramalipoor)

  • The status line names the active profile next to the π brand (π-work), so sessions from different profiles are distinguishable at a glance; the default profile is unchanged (#15622 by @matthewrball)

  • Added opt-in prewalk.auto (off, suggest, or on): the native judge decides per task whether to arm a prewalk handoff to prewalk.autoTarget, and the next task starts back on the planning model (#16026 by @taibenvenuti)

  • Added /seance and the task seance agent: consult a saved session read-only, in place, without resuming it or copying its artifacts; pick the source and an optional model from pickers, and send follow-ups to the consultant (#15036 by @anatoli-tsinovoy)


Changed



  • Tool approval prompts list Approve, Approve <tool> for this session, and Deny again: with an empty composer, pick with the arrow keys and Enter; typing in the composer denies and steers instead, and the Deny row reads "Deny and send message" while you do


Fixed



  • Fixed the Isolate Subagents setting description implying that all tasks run isolated; each task must opt in with isolated: true (#15987).

  • Fixed read labeling re-encoded images with the display format instead of the source file's format; it now identifies both when they differ (#15890).

  • Fixed omp -p and task subagents reporting a clean finish with an earlier answer when a context overflow could not be compacted enough to retry; the overflow error is now the run's outcome (#15897 by @nhthung)

  • Fixed Cursor's Shell tool killing commands once its block_until_ms wait elapsed; the wait no longer sets the kill deadline, which comes from Cursor's hard_timeout or the bash default (#15898 by @nhthung)

  • Fixed an interrupted prompt's late setup cleanup marking the next prompt idle early, allowing overlapping submissions and releasing sleep prevention mid-turn (#15946)

  • Fixed hashline REM hiding the path-recovery warning when a nonexistent path matched an earlier-read file (#15957).

  • Fixed tool downloads (sd, sg, yt-dlp, trafilatura) failing with GitHub API error: 403 on a machine whose egress IP has spent GitHub's anonymous 60/hour budget; the release lookup now sends GITHUB_TOKEN/GH_TOKEN like omp's other GitHub API call sites (#15981 by @iacore)

  • Background local memory extraction now stops after one bounded retry budget on repeated OpenAI-compatible 429 responses instead of multiplying transport, provider, and completion retries (#15826).

  • Fixed a message-result subagent resumed by typing into its focused session leaving agent://<id> empty and never reporting its final reply to the parent (#15948)

  • Fixed read of an RSS or Atom feed showing Untitled for every item and dropping feed titles, descriptions, dates, and RSS item links (#15954)

  • Fixed read showing a binary notice instead of an HTML page when a server sends unlabeled gzip to the first request but decodable HTML to the second (#15956)

  • Fixed read returning a homepage's site-wide feed or a page's site-wide llms.txt alternate instead of the requested page (#15955).

  • Fixed ast_grep reporting a clean "No matches found" for a pattern that does not parse in the target language (e.g. a bare C# identifier); it now lists the pattern's ERROR node as a parse issue (#15950)

  • Fixed --resume <id> and session listings skipping transcripts placed in the session directory as symlinks (#15878, #15884 by @peda-cos)

  • Fixed sessions with a deferred-connecting MCP server listing every routed MCP tool twice, once as a mount notice and once in route guidance (#15982 by @zcyoung2000)


Removed



  • Removed the built-in rs-parking-lot rule; Rust edits using std::sync::{Mutex, RwLock} with .lock().unwrap() are no longer steered to parking_lot


@oh-my-pi/pi-natives


Changed



  • Changed encodeSixel and encodeSixelAsync to drop a partial last 6-pixel band, so an image never extends below the requested height and the caller no longer has to shrink it to a multiple of 6 (#16007)


@oh-my-pi/pi-tui


Added



  • Added selection-only session and model picker actions for /seance, so choosing a source or model leaves the active session and model unchanged (#15036 by @anatoli-tsinovoy)


Changed



  • ApprovalDialogComponent shows a choice list (Approve, an optional session row, Deny): the arrow keys move between them and Enter (armed after APPROVE_ARM_MS) takes the highlighted one; while a composer draft holds Enter the highlight sits on Deny, relabeled "Deny and send message"; Tern clicks on a choice take it; Page Up/Down scroll the details


Fixed



  • Fixed a streamed Markdown list keeping every item out of native scrollback until the turn ended, so rows that scrolled off screen were unreachable mid-stream; items in front of the newest one now retire as soon as it begins (#13676, #15993 by @shgew)

  • Fixed SIXEL charts and SVG figures being resampled before display, which softened their text, on terminals whose cell height is not a multiple of 6 such as Windows Terminal (#16007)


@oh-my-pi/pi-utils


Fixed



  • Fixed Markdown fence info-string parsing to keep backtick-containing backtick openers as paragraph text while accepting backticks in tilde info strings and Unicode line separators in either fence's info string (#15928 by @jchanghong023).

  • Fixed parseHTML treating <link> in RSS/Atom documents as an HTML void element, which dropped the URL text of RSS <link>…</link> (#15954)


What's Changed



  • fix(read): rendered rss and atom feed fields instead of untitled by @roboomp in #15959

  • fix(tools): scoped read alternates to the requested page by @roboomp in #15960

  • fix(read): rendered decoded html from binary refetch by @roboomp in #15961

  • fix(edit): preserved recovery warnings on deleted files by @roboomp in #15962

  • feat(coding-agent): configurable imageCountBudget for custom models by @aramalipoor in #15969

  • fix(tools): send the environment token to the GitHub release lookup by @iacore in #15981

  • fix(coding-agent): suppress mount notices duplicated by route guidance by @zcyoung2000 in #15982

  • fix(task): clarify opt-in subagent isolation setting by @roboomp in #15990

  • fix(tui): retire finished items of a streaming list mid-stream by @shgew in #15993

  • fix(catalog): rename Google Antigravity login label by @savanne-kham in #15998

  • fix(tui): encoded sixel images at their cell box without resampling by @roboomp in #16009

  • fix(ai): failed an aborted cowork request that never received headers by @ca-io-systems in #16010

  • feat(tui): tag the status-line brand with the active profile by @matthewrball in #15622

  • fix(catalog): preserve authoritative caches in resolveProviderModels by @adi-IL in #15770

  • fix(memory): bounded background extraction retries by @roboomp in #15827

  • fix(ai): kept user-attributed developer turns off anthropic system role by @roboomp in #15883

  • fix(session): follow symlinks in session inventory scans by @peda-cos in #15884

  • fix(read): corrected source image format labels by @roboomp in #15892

  • fix(coding-agent): kept an unrecovered context overflow as the run's outcome by @nhthung in #15897

  • fix(cursor): stopped killing Shell commands at the block_until_ms wait by @nhthung in #15898

  • fix(catalog): route Command Code z-ai/glm-5.3-flash to chat completions by @jasonharrison in #15922

  • fix(ai): preserve literal data while dereferencing schemas by @jchanghong023 in #15927

  • fix(utils): preserve invalid backtick fences as prose by @jchanghong023 in #15928

  • fix(ai): keep auth-gateway chat-completions SSE streams alive during upstream silence by @radkawar in #15940

  • fix(session): preserved next prompt state after interrupted setup by @roboomp in #15947

  • fix(task): publish user-resumed message results to agent:// and parent by @roboomp in #15949

  • fix(natives): reported ast-grep patterns that parse to an ERROR node by @roboomp in #15958

  • fix(catalog): omitted tool_choice for openrouter muse models by @roboomp in #15911

  • feat(coding-agent): add opt-in auto-prewalk routing with native judgment by @taibenvenuti in #16026

  • feat(coding-agent): add focused read-only session seance by @anatoli-tsinovoy in #15036

  • chore(coding-agent): remove stale rs-parking-lot TTSR rule by @H4vC in #16034


New Contributors



Full Changelog: v18.11.2...v18.11.3

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
2 Knoten · 1 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)

Related story clusters & sources (vector AI)

2 sources
Firefox Tooling Announcements: MozPhab 2.23.0 Released
1 more source
Pull to refresh
Nächster Beitrag