Kilo-Org/kilocode v7.8.26

v7.8.26 (pre-release)

on GitHub

VS Code

Minor Changes

• #15703 15aded0 - Continue a local worktree in Cloud from Agent Manager. Copy its open conversations after branch validation and acknowledged session sync. Open the Cloud workspace in a browser or copy its link. Retry balance and partial-creation failures with the same prepared request.

• #14782 2311e3a Thanks @sylwester-liljegren! - Add a "Kilo Code: Show Open Tabs" command that opens the open-tabs switcher in the chat.

Patch Changes

• #15776 3723a99 Thanks @jeremy0dell! - Offer the new Agent Manager splash as a default-off option in Experimental settings.

• #15830 a89eab1 Thanks @WebReflection! - Update OpenTelemetry, several AI SDK providers, glob, minimatch, Babel, and esbuild to resolve the remaining moderate and low security advisories.

• #15821 8f2c450 Thanks @WebReflection! - Update dependencies to resolve all remaining high-severity security advisories, including node-forge, brace-expansion, js-yaml, follow-redirects, body-parser, and zod.

• #15739 f584c32 - Update the bundled Playwright runtime and test tooling to 1.64.1.

• #15816 aceb849 Thanks @WebReflection! - Update express, proxy-addr, and shell-quote to fix critical security issues flagged by Dependabot alerts.

• #15776 3723a99 Thanks @jeremy0dell! - Keep Agent Manager example previews fully visible at a stable height and simplify the thin layout by removing numbered badges and the feature stepper.

• #15811 2358698 Thanks @WebReflection! - Update seroval to 1.6.12 to fix security issues flagged by Dependabot alerts.

• #15741 56df553 Thanks @WebReflection! - Show images generated by image models such as Google Nano Banana and by the image generation tool inline in the chat.

• Updated dependencies [f584c32]:

  • @kilocode/kilo-ui@7.8.26

CLI

Minor Changes

• #15703 15aded0 - Continue a local worktree in Cloud from Agent Manager. Copy its open conversations after branch validation and acknowledged session sync. Open the Cloud workspace in a browser or copy its link. Retry balance and partial-creation failures with the same prepared request.

• #15640 3b2da76 Thanks @DenisDupeyron! - Publish an OpenShell-ready Docker image, ghcr.io/kilo-org/kilocode:<version>-openshell, that keeps Kilo's own sandbox off and skips the model catalog fetch, cloud session upload and presence, which OpenShell blocks.

Patch Changes

• #15830 a89eab1 Thanks @WebReflection! - Update OpenTelemetry, several AI SDK providers, glob, minimatch, Babel, and esbuild to resolve the remaining moderate and low security advisories.

• #15801 fbbef71 Thanks @WebReflection! - Update axios to 1.21.0 to fix security issues flagged by Dependabot alerts.

• #15803 61ca5f4 Thanks @WebReflection! - Update fast-uri and fastify, and drop the vulnerable fast-xml-parser copy, to fix security issues flagged by Dependabot alerts.

• #15762 3bc3742 Thanks @WebReflection! - Update glob to 14.0.2 to fix a cancellation issue flagged by Dependabot alerts.

• #15821 8f2c450 Thanks @WebReflection! - Update dependencies to resolve all remaining high-severity security advisories, including node-forge, brace-expansion, js-yaml, follow-redirects, body-parser, and zod.

• #15819 2a45455 Thanks @WebReflection! - Update hono to 4.13.14 and @hono/node-server to 2.1.5 to fix security issues flagged by Dependabot alerts.

• #15571 8782560 - Restore Kilo installation through the Nix overlay while preserving the existing opencode attribute.

• #15816 aceb849 Thanks @WebReflection! - Update express, proxy-addr, and shell-quote to fix critical security issues flagged by Dependabot alerts.

• #15811 2358698 Thanks @WebReflection! - Update seroval to 1.6.12 to fix security issues flagged by Dependabot alerts.

• #15741 56df553 Thanks @WebReflection! - Show images generated by image models such as Google Nano Banana and by the image generation tool inline in the chat.

• #15805 5c38430 Thanks @WebReflection! - Update undici and the packages that pulled in its unpatched 5.x line (GitHub Actions toolkit, Google Vertex and AI Gateway providers) to fix security issues flagged by Dependabot alerts.

• #15802 5a7a1b7 Thanks @WebReflection! - Update @xmldom/xmldom to 0.9.12 so reading .docx files uses a parser with the XML injection and resource-consumption fixes flagged by Dependabot alerts.