github NousResearch/hermes-agent v0.23.1+canary.20261115T064406Z
Hermes Agent canary v0.23.1+canary.20261115T064406Z

pre-releaseone hour ago

Hermes Agent v0.23.1+canary.20261115T064406Z (v0.23.1+canary.20261115T064406Z)

Release Date: November 15, 2026

Downloads

Hermes Desktop

OS Architecture Download
macOS Apple Silicon (M-series) DMG
Windows x86 (64-bit) MSIX
Windows ARM (arm64 / aarch64) MSIX

Native install/chat smoke

Download availability is independent of smoke status. Each result covers all native legs in that format group. Linux bundles are disabled; unsigned Store envelopes are not install-smoked. No-upload dry tags have no download handoff and are not smoke-qualified.

Packages Smoke status
macOS DMG + ZIP (arm64) Passed
Windows MSIX (arm64) Passed
Windows MSIX (x64) Passed

✨ Features

🔧 Improvements

  • Dosbox-mcp to 0.2.4 (bfb9cba1) — @shakeyourbunny
  • Dosbox-mcp to 0.2.3 (dff513a8) — @shakeyourbunny
  • Unblockbruecke.yaml (d902c7e8) — @studioluftbruecke
  • Plugin-catalog: update detonator to v0.3.0 (7e38351d) — @shreyasudupi
  • Eselsbruecke.yaml (3f0693a0) — @studioluftbruecke
  • Catalog: update OwnMachine to v1.0.1 with selected promotional gallery (0d9c7703) — @rbur0425
  • Sentinel Governance catalog pin to v0.6.0 and disclose history replay (10d78642) — @ChasClogston
  • Forgebruecke.yaml (096391ac) — @studioluftbruecke
  • Coolifybruecke.yaml (e94c7e6c) — @studioluftbruecke
  • Hive.yaml (6d026aa5) — @MFaiqKhan
  • SHA for hive plugin in YAML file (0b3deba4) — @MFaiqKhan
  • SHA for hive plugin in catalog (98c1e5c3) — @MFaiqKhan
  • Hive.yaml (b9dc47f4) — @MFaiqKhan
  • Catalog(verifiable-math-kernel): update pin to v1.0.5 (0afbb42fa2631b0c9995695125809b91ba36d480) (55eb11aa) — @pCwOrM
  • Catalog(verifiable-math-kernel): update pin to v1.0.4 (7a85930fa6696375a53624254d549ada582ee0d2) (bbb934a2) — @pCwOrM
  • Catalog(verifiable-math-kernel): update pin to v1.0.3 (a5a16ec) (37c68a8e) — @pCwOrM
  • Yandex plugin pins for marketplace README fixes (8452e148) — @akinfold
  • OpenAny: B2A (business to agent) marketplace copy and root endpoint (27843560) — @ComunionIO
  • Plugin-catalog: update hermes-action-bar to 41bf242 (0.2.0) (08036552) — @fquresh
  • Plugin-catalog: update lusor tool disclosure and pin (81ceed64) — @illusivejosiah
  • Rails catalog submission to 0.4.2 detection fixes (AI-assisted) (3ba0fa6f) — @grimmjoww578
  • Hermes Reading to 0.1.1 (9db8bcff) — @forgoneops
  • Hermes Reading plugin pin (a9d70c77) — @forgoneops
  • VividSites entry to combined free and optional paid plugin (73191dba) — @krumjahn
  • Cli): move config value redaction into config_secret_display (142f68f7) — @KrasimirKralev

🐛 Bug Fixes

  • Plugins): a docstring critical stops at caution; header and re-encoded lines stay code (d1b46d71)
  • Gateway,desktop): name the primary only when the fallback was refused, and keep the prompt out of a selection (296d8388) — @yoniebans
  • Gateway): a failed turn after a lapsed primary login names the primary on its error card (fecec6b4) — @yoniebans
  • Cli): show a runnable re-login for external CLI plugins without an auth handler (ae363cd5) — @yoniebans
  • Desktop): keep the external sign-in command inside its card and selectable (08af1809) — @yoniebans
  • Fallback): surface the primary provider's expired login when the backup fails (2baaeeba) — @aantix
  • Context): surface SSRF and secret-URL refusals in @url references (ed1f43c1) — @c2h5oh
  • Video-xray: fix screenshot URLs to real files at v0.2.2 (e91d8822) — @LuuMoss
  • Pin profile-local hostd transport configuration (085905dd) — @violetSoftware
  • Pin hostd plugin with native approval hook (c9e86a6f) — @violetSoftware
  • Plugin-catalog): re-pin agentline to 6eda871 (1.2.0) (9904d083) — @prakhar-raj-031104
  • Re-pin EarnFi catalog to 1.5.2 (3d595e9 listing fixes) (b5c2d8e8) — @earnfidotfun
  • Re-pin EarnFi catalog sha to f8502f9 (1.5.1 HEAD) (683d510b) — @earnfidotfun
  • Re-pin EarnFi catalog to 1.5.1 (listing security follow-up) (1bf10663) — @earnfidotfun
  • Re-pin EarnFi catalog to 1.5.0 (security review) (afc68d04) — @earnfidotfun
  • Re-pin EarnFi catalog to 1.4.9 (README fences) (83eeacad) — @earnfidotfun
  • Refresh EarnFi catalog banner pin (1.4.7) (e866b8a0) — @earnfidotfun
  • Reconcile EarnFi catalog credentials and banner pin (aec1e21c) — @earnfidotfun
  • Secrets): a plugin refresh keeps the launch scope's env and never crosses homes (e4888ba0) — @c2h5oh
  • Catalog): update hermes-janus pin to 1527210 (5742f91b) — @Yonathan-T
  • Plugin-catalog): re-pin blindoracle to aa1ca16d (review fixes) (282e44bc) — @craigmbrown
  • Plugin-catalog): re-pin bae to f450d48 (sample-mode default, onboarding fixes) (be31b478) — @jarrett-del
  • Plugin-catalog): re-pin bae to 78d4dd9 and declare its pre_tool_call hook (0860a6b8) — @jarrett-del
  • Plugin-catalog): remove unsupported terminal action (1e67a4fb) — @oways
  • Plugins): pin rh-preflight to the secret scope fix (01759b64) — @quotumorg
  • Plugin-catalog): update zerofactory pinned SHA (3bbf0122) — @ntsd
  • Pin: 8ef488f (portable manifest commit, validator green) (4207e583) — @wusanjay
  • Declare mux_tracks in provides_tools (rule 6) (2a182815) — @wusanjay
  • Security): redact Discord bot tokens outside KEY=value shape (bfa85b3e) — @rodricksz4h5
  • Approval): preserve assignment and conditional review input (4163c81e) — @shoyann
  • Approval): preserve extended glob review input (a25a479b) — @shoyann
  • Approval): preserve opaque expansions and escaped whitespace (ff9ab09c) — @shoyann
  • Approval): preserve arithmetic expansion review input (265fffb4) — @shoyann
  • Approval): isolate comments from heredoc and newline handling (b31d6f80) — @shoyann
  • Approval): keep multi-line strings and heredocs intact in smart review (e15bf685) — @lolchocotaco
  • Approval): preserve in-word hashes in smart review (db51a761) — @shoyann
  • Desktop): a messaging-chat paste over the save cap is dropped, not inlined (c7a6fa7a) — @helix4u
  • Telegram): a comment absorbed by an inlined document survives the album's command caption (0896d4df)
  • Telegram): a comment and the video, voice or file sent right after it are one turn (f670c8b4)
  • Gateway): a queued follow-up no longer skips the previous turn's post-delivery callback (c52207e3) — @0xble
  • Catalog: re-pin teleoperator to the review-fix commit (66d33b84) — @Tsurgcom
  • Gateway): a busy /moa keeps the stop epoch it arrived under (8090a9ef)
  • Cli): a failed requested profile override exits non-zero (#152716) (#152716) — @phon-t
  • Cron): scan heredoc bodies a command writes and then executes (ee63c993) — @c2h5oh
  • Gateway): point the Windows service-session warning at a normal desktop start (4bb75bae) — @unsupportedpastels
  • Config): keep the Remote Config read base across the mask guard read (15aa3fa1) — @c2h5oh
  • Cli): restart waits re-send one frozen request and stop on Ctrl+C (daaafa9a)
  • Security): keep quotes inside connection-string passwords masked (5ea3a8af) — @thejesh23
  • Desktop): keep a large paste inline in a messaging-platform chat (1a5d7c08) — @helix4u
  • Backup): recover owned ZIP and SQLite staging after interruption (389e34af) — @helix4u
  • Gateway): register the Windows task from its XML principal only (e60f483f) — @c2h5oh
  • Skills): keep plaintext secrets out of oss-forensics working files (#155378) (#155378) — @c2h5oh
  • Notifications): keep Clear all clearing bottom-right toasts (4122b05c) — @kshitijk4poor
  • Profiles): retire draft setup on rename instead of deleting the draft (8d4616a1) — @kshitijk4poor
  • Profiles): keep creation warnings visible across client lifecycles (de57009b) — @kshitijk4poor
  • Debug): don't mask systemd unit instances as email addresses (e38f5c24) — @c2h5oh
  • Gateway): redact the systemctl status process tree (5662449a) — @lester076
  • Memory): skip bare auto-loads and keep lookalike typed text (20efa1ec)
  • Pm): carry skills and plugin/MCP catalogs into the snapshot too (6e3683a9)
  • Telegram): only the card author is captured, whatever their reply points at (a40a854a)
  • Security): bound per-entry inflated size when extracting marketplace theme vsix (301a509d) — @briandevans

📚 Documentation

  • Refresh EarnFi catalog details and pin (1.4.8) (6a37e158) — @earnfidotfun
  • Catalog): clarify HermesCRM listing copy (9578c774) — @gptnius
  • Catalog): add hermes-templates (a3d3b0be) — @Ilyassbm
  • Gateway): name the heartbeat and the session-namespace exceptions (1831ce1c) — @alt-glitch
  • Signal): note why inline code is matched before enclosing pairs (64d66d89) — @c2h5oh
  • Cron): document the per-job wrap_response override (2eb00141) — @iamfoz
  • Skills): builtin scan trust also covers the official live-repo fallback (4b86af50) — @c2h5oh

🧪 Tests

  • Cli): the external sign-in card shows the plugin's own login command when it declares one (currently failing) (ff52795b) — @yoniebans
  • Gateway): pin the primary card for auth_permanent and the fallback's retry time (2b250eeb) — @yoniebans
  • Gateway): the primary's card on messaging turns, and no change without a lapsed primary (561501b7) — @yoniebans
  • Plugins): compare the dropped-cookie warning's home as a home key (0be129d1) — @c2h5oh
  • Threat_patterns): pin that chars past the scan cut are not reported (d310b0c1) — @c2h5oh
  • Session-search): cover redaction of lower-ranked compact discovery results (343e648b) — @c2h5oh
  • Pm): every root data dir travels with the snapshot once (049dc4cd)
  • Cron): pin the exemption removal with expansion-based second destinations (0f05ab7f) — @c2h5oh

🏗️ Infrastructure

  • Contributors): map jim.jones1@gmail.com to aantix (e7479b65) — @yoniebans
  • Catalog): review disclosure for dosbox-mcp (7a725cfe)
  • Catalog): drop empty image/screenshots fields from hermes-eye-memory (952f7b68)
  • Plugin-catalog): bump circuit-bench to 0.1.1 (ed95cb6c) — @juvenile454
  • Catalog): livetalk requires_hermes >=0.22.1 (prompt.receipt ships in v0.22.1) (be53dd38)
  • Map contributor email for lad75020 (5d616829)
  • Catalog): review disclosure for qmd-workspaces (ff194672)
  • Catalog): bump Frihet to v0.2.2 (c6339f39) — @berthelius
  • Map contributor email for dev-willbird1936 (788bda70)
  • Catalog): review disclosure for asset-curator (93adb3fe)
  • Map contributor email for LuuMoss (24c13ddb)
  • Catalog): review disclosure for video-xray (375e34a0)
  • Catalog): review disclosure for detonator (fa745a48)
  • Catalog): bump hermes-stage to 0.66.8 (f344b15c) — @davidpgil
  • Plugin-catalog): bump 3ds-platform to 0.2.1 (a350cb37) — @rndaom
  • Plugin-catalog): bump pinned-folders to v0.1.14 (78b0862b) — @jacobhausler
  • Catalog): caduceus erase and sync wording (c9d2598d) — @100yenadmin
  • Catalog): bump caduceus to v0.3.0 (a3a35989) — @100yenadmin
  • Plugin-catalog): bump alice-voice to 0.3.2 at its renamed repository (edb2c13a) — @bablobanov
  • Map contributor email for supa-thibaud (7239ce3b)
  • Map contributor email for jeevships (813bd8d1)
  • Map contributor email for alertxsto (57dfc70e)
  • Catalog): review disclosure for luminary (865b3833)
  • Catalog): review disclosure for plan-mode (8e4df2c7)
  • Catalog): review disclosure for deepseek-web-tools (1d6a00c9)
  • Catalog): review disclosure for theme-catalog (baedc023)
  • Plugin-catalog): update incognito to v1.0.1 (0569c3b6) — @nicolasbuelvas
  • Catalog): update genealogy recipes to v1.19.0 (48a6c9b0) — @lazyants
  • Catalog): update genealogy recipes to v1.18.0 (63182a34) — @lazyants
  • Catalog): review disclosure for softhalo-usage (9af8a7b8)
  • Plugin-catalog): update aamio to 0.7.46 (958a83c3) — @aisenseapi
  • Plugin-catalog): update aamio to 0.7.45 (d53c89ca) — @aisenseapi
  • Plugin-catalog): update aamio to 0.7.44 (ee4f2c49) — @aisenseapi
  • Plugin-catalog): update aamio to 0.7.43 (c4053c96) — @aisenseapi
  • Plugin-catalog): bump yantrikdb to v0.28.0 (3f23f540) — @spranab
  • Catalog): review disclosure for modelscout (34eea162)
  • Catalog): review disclosure for forgebruecke (77bba032)
  • Catalog): review disclosure for coolifybruecke (7499cb1d)
  • Map contributor email for violetSoftware (7cbc2927)
  • Catalog): review disclosure for hostd-client (965eff6f)
  • Map contributor email for jinsu133 (2d3af582)
  • Catalog): review disclosure for hermes-phone-control (9ed53ebe)
  • Map contributor email for Siioh (aa634f7f)
  • Map contributor email for prakhar-raj-031104 (58e98ce8)
  • Catalog): review disclosure for earnfi (e95536e8)
  • Map contributor email for yogeshchoudhary555 (d25d00a8)
  • Catalog): review disclosure for data-wrangler (f28ee0d4)
  • Map contributor email for pCwOrM (b5333909)
  • Catalog): review disclosure for verifiable-math-kernel (cf8ef23a)
  • Map contributor email for unifyWeb3 (089a8289)
  • Catalog): review disclosure for meridian (232f56e1)
  • Catalog): re-pin meridian to e876f60 (v1.0.4) after symlink hardening (10119f0d) — @unifyWeb3
  • Catalog): re-pin meridian to 3587fd5 (demo docs update) (e0443179) — @unifyWeb3
  • Catalog): re-pin meridian to 6d2624c (README command fixes) (a5941b45) — @unifyWeb3
  • Catalog): re-pin meridian to d83d218 (style pass) (9508327d) — @unifyWeb3
  • Catalog): lede synced with manifest disclosure (f468a751) — @unifyWeb3
  • Catalog): re-pin meridian to 6002020 (docs pass) (c9926369) — @unifyWeb3
  • Catalog): re-pin meridian to 5b981ac (v1.0.2) after verification fixes (fe5f68b8) — @unifyWeb3
  • Catalog): re-pin meridian to 1a3c103 (v1.0.1) after review fixes (4fa2c18e) — @unifyWeb3
  • Catalog): review disclosure for code-assurance-engine (2c9cfdbb)
  • Catalog): review disclosure for printwatch (9191e79b)
  • Map contributor email for samundra0 (ade10e23)
  • Catalog): review disclosure for visor (8ee25574)
  • Catalog): review disclosure for taofind (eb417a9c)
  • Catalog): review disclosure for chinamedvisit (5afbc7e3)
  • Catalog): review disclosure for coach (2b254acc)
  • Map contributor email for wadewegner (e258eebd)
  • Catalog): review disclosure for look-at-this (30f44c58)
  • Map contributor email for InovArcAi (d123fe8b)
  • Catalog): repin qdrant-memory to Runtime 0.6.3 (2560f172) — @cnkang
  • Catalog): review disclosure for breadcrumbs (5c8a12fe)
  • Catalog): review disclosure for case-trail, creator-studio, game-lab, live2d-rigger, pagecast-director, skill-workshop (2f6bee0f)
  • Plugin-catalog): creator-studio 0.5.1 (GPU device choice fix) (c7e29cae) — @flabanabba8
  • Catalog): pin proofops 0.7.1 - diff command, refusal names its fix (e017b32e) — @rasrobo
  • Plugin-catalog): bump kiro-provider to v1.1.0 (d50e92a8) — @anpicasso
  • Plugin-catalog): bump cursor-provider to v0.5.0 (cb284428) — @anpicasso
  • Catalog): bump go-whatsapp to v0.6.0 (842cc138) — @anpicasso
  • Catalog): bump go-whatsapp to v0.5.0 (db03a162) — @anpicasso
  • Catalog): bump jev-approvals to v0.4.0 (f75f8285) — @anpicasso
  • Catalog): bump hermes-plugin-chrome-profiles to v2.0.1 (175deb22) — @anpicasso
  • Catalog): review disclosure for heartbeat2 (e7fe4baa)
  • Catalog): review disclosure for hermes-crm (2ccdb4e1)
  • Catalog): review disclosure for holographic (3e3650f2)
  • Catalog): review disclosure for aeorank (6118e0a8)
  • Catalog): review disclosure for ciphervault (12c9e250)
  • Catalog): bump ciphervault to 0.6.5 (6009fed) — restrict recovery_drill via to configured public operators (666a7c3d) — @samuel-1-avson
  • Map contributor email for Yonathan-T (08d0df03)
  • Catalog): review disclosure for hermes-janus (ea9cc5a1)
  • Map contributor email for craigmbrown (8cb8b85a)
  • Catalog): review disclosure for blindoracle (65f9f43d)
  • Catalog): re-pin cmi to 1.12.3 (2076aa4c) — @jeremiebergel
  • Plugin-catalog): toll 0.3.0 (bab37134) — @soli0x
  • Catalog): review disclosure for model-explainer (ba709bdc)
  • Catalog): review disclosure for mesh-check (81f28eee)
  • Map contributor email for shengqiqwq-spec (a99e4240)
  • Map contributor email for nicholaslaldigital (c8cb045f)
  • Catalog): review disclosure for memorybank (e12dad13)
  • Plugin-catalog): re-pin memorybank to 1.4.0 (788de31b) — @nicholaslaldigital
  • Catalog): update SessionCrew to 0.2.0 (4dab8b85) — @shirogane-yuine[bot]
  • Map contributor email for jarrett-del (e0160cd6)
  • Catalog): review disclosure for bae (37834cac)
  • Plugin-catalog): re-pin meetstream to 4d43b0f (meeting chat is web-only) (beac86db) — @doluz
  • Map contributor email for forgoneops (945cf16a)
  • Catalog): review disclosure for hermes-reading (c9a00232)
  • Catalog): review disclosure for hermes-browser-extension (645a741c)
  • Catalog): review disclosure for hermes-workflows (365177e5)
  • Plugin-catalog): repin hermes-workflows to v1.4.9 (est-gosrh) (ac3370e5) — @jacobhausler
  • Plugin-catalog): pin Finder v1.2.0 source (2ca88548) — @oways
  • Plugin-catalog): bump Finder to v1.2.0 (c7cb4211) — @oways
  • Map contributor email for AbigailDavised (1d1d070c)
  • Map contributor email for krumjahn (d9b06b7b)
  • Catalog): review disclosure for vividsites (338e355f)
  • Map contributor email for sr33j (7f3cd4af)
  • Catalog): review disclosure for crowdcode (814ee52d)
  • Catalog): review disclosure for wiretap (51f7384c)
  • Catalog): review disclosure for living-spaces (e8899af6)
  • Catalog): pin Living Spaces review fixes (19825b77) — @akinduroifedayo
  • Map contributor email for hi4c0ck (e5cbf587)
  • Catalog): review disclosure for its-in-your-head (3656d6c9)
  • Catalog): review disclosure for vitam (d99de4cc)
  • Catalog): review disclosure for rh-preflight (fc7b6e11)
  • Pin rh-preflight 0.5.4 (f0d4415a) — @quotumorg
  • Catalog): review disclosure for zerofactory (5775e245)
  • Plugin-catalog): bump zerofactory sha to a8e1e630 (0b91b8c5) — @ntsd
  • Catalog): re-pin zerofactory sha to 626c043 (00f8b129) — @ntsd
  • Plugin-catalog): re-pin zerofactory to 7eab8740 (197578bd) — @ntsd
  • Update zerofactory to v1.3.0 with self-healing recovery (0252637d) — @ntsd
  • Update zerofactory plugin to v1.3.0 (e28aa193) — @ntsd
  • Map contributor email for wusanjay (03b25a7e)
  • Catalog): review disclosure for rea-video-hermes (3f0b88a8)
  • Catalog): review disclosure for hermes-templates (bdc78f05)
  • Catalog): review disclosure for antigravity-subscription-directsdk (7ec8b2b8)
  • Catalog): bump antigravity-subscription-directsdk to 1.0.27 (6b3d45b4) — @soyelmismo
  • Catalog): bump antigravity-subscription-directsdk to 1.0.26 (79bcfa77) — @soyelmismo
  • Catalog): pin antigravity-subscription-directsdk to a055427 (v1.0.25) (33e35cb7) — @soyelmismo
  • Catalog): review disclosure for operate-hermes-plugin (f7838034)
  • Plugin-catalog): re-pin operate-hermes-plugin to dea1145e (v1.2.0) (a0b794b2) — @rxdha1
  • Catalog): review disclosure for worktable (9c191714)
  • Map contributor email for Tsurgcom (1a45f009)
  • Catalog): review disclosure for hermes-teleoperator (ef0b28fb)
  • Catalog): review disclosure for autorag (d9855cad)
  • Map contributor email for lester076 (368d982b) — @c2h5oh
  • Plugins): record the FAL video plugin's direct_fal_client import in the boundary baseline (ab7b3ad8) — @kshitijk4poor

📦 Other Changes

  • Plugin-catalog: glasses-platform 0.6.8 (9dffcfba) — @100yenadmin
  • Plugin-catalog: shinjuku pins db1ced6 (0.1.1: setup lines for Windows, Git listed as a prerequisite) (8783054e) — @Shinjuku-StAItion
  • Pin catalog entry to security fix (ed8fd34a) — @isthatananya
  • Pin hermes-eye-memory to compatibility fix (13ba0436) — @isthatananya
  • Catalog: remove follow-through (author withdrew plugin) (cd922988) — @Agenziamaia
  • Catalog: remove eyes (author withdrew plugin) (e96ae552) — @Agenziamaia
  • Catalog: remove card-grader (author withdrew plugin) (de9a2f30) — @Agenziamaia
  • Plugin-catalog: re-pin tironian to 3b8c1f1 (post-deadline fixes) (c0fbe46e) — @angelraph
  • Plugin-catalog: bump tironian to 0.2.0 (e25e339) (6f0d8dd6) — @angelraph
  • Pin: the dependency declaration rides along (websockets floor+bound) (129b3427) — @cruzlxyz
  • Rebrand: gemini-live-bridge becomes livetalk (pin v2.0.0) (4436eb78) — @cruzlxyz
  • Rebrand: gemini-live-bridge becomes livetalk (pin v2.0.0) (34244862) — @cruzlxyz
  • Create shaderbruecke.yaml (84b8e304) — @studioluftbruecke
  • Pin Asset Curator 0.3.0 user-controlled access fix (89733a5f) — @dev-willbird1936
  • Video-xray: dedupe screenshot list (c4b14bd3) — @LuuMoss
  • Video-xray: re-pin to v0.2.2 (review round 2 fixes) (f43231b4) — @LuuMoss
  • Video-xray: pin v0.2.1 (review fixes: worker env, secret scope, path whitelist, plugin-data storage) (e244fcd4) — @LuuMoss
  • Plugin-catalog: bump lancedb-suite to v1.8.0 (6fd0faa9) — @3L0935
  • Plugin-catalog: pin luminary at the load fix (de0e0741) — @alertxsto
  • Plugin-catalog: bump plan-mode to 1.5.2 (4d661c60) — @100yenadmin
  • Plugin-catalog: bump plan-mode to 1.5.1 (7f484d04) — @100yenadmin
  • Catalog: re-pin deepseek-web-tools to 1.0.1 (second review pass) (b747a84a) — @fedebyes
  • Catalog: re-pin theme-catalog to 0.4.0 (253a08f7) (16f8271e) — @0-CYBERDYNE-SYSTEMS-0
  • Catalog: pin Sentinel Governance v0.7.0 with reviewed disclosures (0e5409ab) — @ChasClogston
  • Create forgebruecke.yaml (90f67668) — @studioluftbruecke
  • Create coolifybruecke.yaml (2ebdf0c5) — @studioluftbruecke
  • Plugin-catalog: re-pin hermes-phone-control to f41e2c67 (9af4e6a2) — @jinsu133
  • Plugin-catalog: bump own-compute to d203de9 (709b9df7) — @Siioh
  • Plugin-catalog: bump own-compute to 97522db (a118cf33) — @Siioh
  • Plugin-catalog: bump own-compute to ec3c166 (426bdfce) — @Siioh
  • Catalog: re-pin data-wrangler to 7c32cb8 (approval-gated write fix) (bfa7cffc) — @yogeshchoudhary555
  • Code-assurance-engine: pin 4a31218 (allowlisted git env, confined --state-dir, repo filter drivers refused) (96cf6def) — @Sahil-SS9
  • Printwatch: v0.4.3 (sha 1919e952) — approval gate via pre_tool_call on hardware tools (round-3 delta) (684b46bb) — @clawsyndicate
  • Printwatch: v0.4.2 (sha 04412872) — public secret_scope + plugin_storage APIs (round-2 review delta) (76d89d6d) — @clawsyndicate
  • Printwatch: v0.4.1 catalog entry (sha b5aec03 — review fixes: handler contract, python_dependencies, secret_scope, printer_upload, snapshot path) (40fbbbce) — @clawsyndicate
  • Re-pin visor to 5c89350e (v1.10: second catalog-review round) (ee9c7222) — @samundra0
  • Plugin-catalog: visor — pin 17a8ba5 (Docker path fix: container bind + entrypoint token export) (c91f9dbc) — @samundra0
  • Plugin-catalog: boardstate 1.5.13 (dca59037) — @100yenadmin
  • Catalog: bump coach to 1.0.1 (d0a28d1e) — @Printaga
  • Pin merged Yandex README fixes (89de04f2) — @akinfold
  • Plugin-catalog: bump searchscope-ai-visibility to c32b657 (1a3e5837) — @InovArcAi
  • Plugin-catalog: bump browser-viewer to 0.2.0 (macOS support) (d9848654) — @vittoriocompagno
  • Plugin-catalog: hermes-kame-api-rotation 1.9.0.1 (9614ef63) — @Kame696
  • Plugin-catalog: hermes-kame-provider 1.9.0.0 (4e04390c) — @Kame696
  • Plugin-catalog: hermes-kame-api-rotation 1.9.0.0 (45a56137) — @Kame696
  • Plugin-catalog: bump hermes-teammates to 1.8.0 (a7fe1ba9) — @100yenadmin
  • Plugin-catalog: bump hermes-teammates to 1.7.0 (4f8849cf) — @100yenadmin
  • Plugin-catalog: breadcrumbs 0.5.0 (breadcrumbs-hermes replaces hermes-breadcrumb-plugin) (e060ce76) — @jnorthrup
  • Plugin-catalog: bump stoa to 0.21.0 (7d4e75f9) — @jarrett-del
  • Plugin-catalog: bump stoa to 0.20.4 (3eeb698b) — @jarrett-del
  • Plugin-catalog: bump stoa to 0.20.3 (c648e84e) — @jarrett-del
  • Plugin-catalog: bump stoa to 0.20.1 (4b615e63) — @jarrett-del
  • Plugin-catalog: bump stoa to 0.20.0 (5504bdc4) — @jarrett-del
  • Catalog: re-pin case-trail (plugin.yaml floor now matches requires_hermes, rule 14) (257a4bf3) — @flabanabba8
  • Catalog: re-pin live2d-rigger (plugin.yaml floor now matches requires_hermes, rule 14) (5dd03b58) — @flabanabba8
  • Catalog: re-pin game-lab (plugin.yaml floor now matches requires_hermes, rule 14) (0ba2814d) — @flabanabba8
  • Catalog: re-pin creator-studio 0.5.2 (Clip Studio no longer uses browser cookies, rule 11) (d70ca673) — @flabanabba8
  • Revert "chore(catalog): bump jev-approvals to v0.4.0" (55c7eb45) — @anpicasso
  • Plugin-catalog: heartbeat2 0.4.5 (189d589c) — @100yenadmin
  • Plugin-catalog: re-pin local-hands to d302f63 (1.1.0) (b1ef643e) — @noegng
  • Plugin-catalog: holographic 0.28.0 (5fabf63a) — @itpartypattaya
  • Plugin-catalog: bump ciphervault to 0.6.2 (6bdc3605) — @samuel-1-avson
  • Plugin-catalog: construct 1.3.2 (dcaba002) — @rtmandreyev
  • Catalog: live-video 1.3.6 (mic state honesty, single permission prompt) (e512bf7e) — @dacheah
  • Catalog: live-video 1.3.5 (LAN token cookie) (c1621473) — @dacheah
  • Catalog: live-video 1.3.4 (Windows verified on hardware) (3f24260a) — @dacheah
  • Catalog: live-video 1.3.3 (self-excluding tracker scan) (5bbc8ddf) — @dacheah
  • Catalog: live-video 1.3.2 (Windows child environment) (8e81af05) — @dacheah
  • Catalog: live-video 1.3.1 (zombie-aware stop, host self-test) (7ae853b8) — @dacheah
  • Catalog: live-video 1.3.0 with Windows support (55ee272f) — @dacheah
  • Plugins: pin Inline 1.2.0 (2bc406cc) — @morajabi
  • Plugin-catalog: bump emotion-chip to 0.3.4 (374c2450) — @100yenadmin
  • Catalog: pin Rails 0.4.3 continuation authorization fixes (b313d994) — @grimmjoww578
  • Catalog: rails 0.4.1 — card image + re-pin (abe4bfb0) — @grimmjoww578
  • Correct Hermes Reading plugin pin (a7354625) — @forgoneops
  • Catalog: use a 2:1 cover image for hermes-browser-extension (3c3e7f6d) — @abundantbeing
  • Catalog: re-pin hermes-browser-extension to 438460d4 (public profile APIs only) (b4afe409) — @abundantbeing
  • Catalog: re-pin hermes-browser-extension to v0.4.1 (a04b7e12) (e08cf0ec) — @abundantbeing
  • Describe VividSites cinematic website design and pin verified metadata update (8b38d850) — @krumjahn
  • Pin reviewed VividSites source hardening (9e3505d5) — @krumjahn
  • Crowdcode: re-pin to d23d30f (0.2.2): downloads stay in the session folder unless approved (ef781007) — @sr33j
  • Crowdcode: re-pin to 304aa09 (0.2.1): every money move asks for approval by default (caa9cbb2) — @sr33j
  • Catalog: pin living-spaces to e6145cc (current release documentation) (a4adbfc5) — @akinduroifedayo
  • Catalog: pin living-spaces to 4f0b419 (same plugin package, cleaned repo and README) (95905d6c) — @akinduroifedayo
  • Catalog: simplify Living Spaces listing copy (7a7c170c) — @akinduroifedayo
  • Catalog: re-pin its-in-your-head to 8c41205 / 0.1.29; re-pin image+screenshots (d122c4a1) — @hi4c0ck
  • Catalog: repin its-in-your-head to b83e13f77b0c (last main: docs drop + strip retake) (b85e852c) — @hi4c0ck
  • Plugin-catalog(its-in-your-head): re-pin to 407b05d (final: PULSE-only strip docs sync) (e23c2c18) — @hi4c0ck
  • Plugin-catalog(its-in-your-head): re-pin to 0a7db3d (v0.1.25 compact PULSE-only strip + recaptured asset) (bb8a417f) — @hi4c0ck
  • Plugin-catalog(its-in-your-head): re-pin to cbce429 (docs: manual + live screenshots) + gallery shots (d81c3da1) — @hi4c0ck
  • Catalog(vitam): re-pin to 35b7abfc (command-handler closure fix) and bump to 1.1.1 (f9c119d5) — @taylorwtf
  • Vitam: re-pin e92b558 (pairing token, caps, env/secret hardening per review of effa783f), bump 1.1.0 (c8913e01) — @taylorwtf
  • Re-pin to 5d2bc03 (PLUGIN_DATA portability fix) (065e6e73) — @wusanjay
  • Re-pin to dda5e7d (security review fixes) (48b7b5f1) — @wusanjay
  • Pin to portable-plugin commit 7216414 (validator green) (cdcf35ca) — @wusanjay
  • Plugin-catalog: hermes-templates 1.3.1 (re-pin d42a8a9, approval policy) (831ad0b8) — @Ilyassbm
  • Plugin-catalog: hermes-templates 1.3.0 (re-pin 38aa642, review fixes) (e7b888c1) — @Ilyassbm
  • Worktable: say pairing also sends an installation id (2cc031d6) — @obkaro
  • Worktable: pin 0.1.3, only the owner and the owner's agents can direct it (4d65f12c) — @obkaro
  • OpenRouter's prompt-injection guardrail 403 no longer reads as a firewall/key problem (#155460, salvage #155472) (#155828) (#155460)
  • Catalog: pin Hermes Teleoperator 1.2.0 (585c65b9) — @Tsurgcom
  • Peer: sanitize peer-controlled text before printing to the terminal (12d92b12) — @beardthelion
  • Port from OpenHands/software-agent-sdk#5143: send the compaction summarizer instructions as system + turns as user (#5143)

👥 Contributors

Thank you to everyone who contributed to this release!

  • @BearHuddleston (162 commits)
  • @c2h5oh (14 commits)
  • @100yenadmin (10 commits)
  • @AbigailDavised (10 commits)
  • @jarrett-del (10 commits)
  • @unifyWeb3 (9 commits)
  • @yoniebans (8 commits)
  • @earnfidotfun (8 commits)
  • @studioluftbruecke (7 commits)
  • @anpicasso (7 commits)
  • @dacheah (7 commits)
  • @ntsd (7 commits)
  • @liuhao1024 (7 commits)
  • @krumjahn (6 commits)
  • @abundantbeing (6 commits)
  • @hi4c0ck (6 commits)
  • @wusanjay (6 commits)
  • @shoyann (6 commits)
  • @LuuMoss (5 commits)
  • @MFaiqKhan (5 commits)
  • @clawsyndicate (5 commits)
  • @flabanabba8 (5 commits)
  • @akinduroifedayo (5 commits)
  • @unsupportedpastels (5 commits)
  • @rodricksz4h5 (4 commits)
  • @aisenseapi (4 commits)
  • @Siioh (4 commits)
  • @pCwOrM (4 commits)
  • @forgoneops (4 commits)
  • @oways (4 commits)
  • @kshitijk4poor (4 commits)
  • @beardthelion (4 commits)
  • @shakeyourbunny (3 commits)
  • @isthatananya (3 commits)
  • @Agenziamaia (3 commits)
  • @cruzlxyz (3 commits)
  • @violetSoftware (3 commits)
  • @Kame696 (3 commits)
  • @grimmjoww578 (3 commits)
  • @sr33j (3 commits)
  • @taylorwtf (3 commits)
  • @quotumorg (3 commits)
  • @Ilyassbm (3 commits)
  • @soyelmismo (3 commits)
  • @obkaro (3 commits)
  • @helix4u (3 commits)
  • @Tsurgcom (3 commits)
  • @angelraph (2 commits)
  • @dev-willbird1936 (2 commits)
  • @jacobhausler (2 commits)
  • @agent-local (2 commits)
  • @jeevships (2 commits)
  • @alertxsto (2 commits)
  • @tuancookiez-hub (2 commits)
  • @lazyants (2 commits)
  • @Adolanium (2 commits)
  • @ChasClogston (2 commits)
  • @TakeshiTGAL (2 commits)
  • @Sahil-SS9 (2 commits)
  • @samundra0 (2 commits)
  • @akinfold (2 commits)
  • @Elshayib (2 commits)
  • @JerryLiu369 (2 commits)
  • @fquresh (2 commits)
  • @samuel-1-avson (2 commits)
  • @Yonathan-T (2 commits)
  • @craigmbrown (2 commits)
  • @bertheto (2 commits)
  • @webtecnica (2 commits)
  • @JoaoMarcos44 (2 commits)
  • @fangliquanflq (2 commits)
  • @aantix (1 commit)
  • @Shinjuku-StAItion (1 commit)
  • @imperator-clawdius (1 commit)
  • @juvenile454 (1 commit)
  • @ptaranat (1 commit)
  • @lad75020 (1 commit)
  • @berthelius (1 commit)
  • @shreyasudupi (1 commit)
  • @davidpgil (1 commit)
  • @dudicslevente (1 commit)
  • @rndaom (1 commit)
  • @3L0935 (1 commit)
  • @bablobanov (1 commit)
  • @trenthalden (1 commit)
  • @alexeyeryshev (1 commit)
  • @waynehamadi (1 commit)
  • @fedebyes (1 commit)
  • @0-CYBERDYNE-SYSTEMS-0 (1 commit)
  • @nicolasbuelvas (1 commit)
  • @fitzss (1 commit)
  • @ahujat (1 commit)
  • @Lugier (1 commit)
  • @rbur0425 (1 commit)
  • @spranab (1 commit)
  • @iknowterry (1 commit)
  • @jinsu133 (1 commit)
  • @prakhar-raj-031104 (1 commit)
  • @yogeshchoudhary555 (1 commit)
  • @Printaga (1 commit)
  • @wadewegner (1 commit)
  • @raidwaleed (1 commit)
  • @MadeByBrain (1 commit)
  • @InovArcAi (1 commit)
  • @cnkang (1 commit)
  • @vittoriocompagno (1 commit)
  • @openbotgit[bot] (1 commit)
  • @ComunionIO (1 commit)
  • @jnorthrup (1 commit)
  • @rasrobo (1 commit)
  • @0x7s0lt1 (1 commit)
  • @noegng (1 commit)
  • @gptnius (1 commit)
  • @itpartypattaya (1 commit)
  • @adriens (1 commit)
  • @aizaloapp (1 commit)
  • @rtmandreyev (1 commit)
  • @jeremiebergel (1 commit)
  • @soli0x (1 commit)
  • @afzalbuilds (1 commit)
  • @illusivejosiah (1 commit)
  • @morajabi (1 commit)
  • @eddwithers (1 commit)
  • @BeckleyTenriajeng (1 commit)
  • @shengqiqwq-spec (1 commit)
  • @nicholaslaldigital (1 commit)
  • @shirogane-yuine[bot] (1 commit)
  • @doluz (1 commit)
  • @aka-lacie (1 commit)
  • @rxdha1 (1 commit)
  • @sandeepc25 (1 commit)
  • @lolchocotaco (1 commit)
  • @alt-glitch (1 commit)
  • @ygd58 (1 commit)
  • David Lepaux (1 commit)
  • @mene-crab (1 commit)
  • @0xble (1 commit)
  • @phon-t (1 commit)
  • @vkehfdl1 (1 commit)
  • @Bartok9 (1 commit)
  • @zapabob (1 commit)
  • @memosr (1 commit)
  • @zashraf1337 (1 commit)
  • @ZHJay (1 commit)
  • @asdlem (1 commit)
  • @thejesh23 (1 commit)
  • @KrasimirKralev (1 commit)
  • @iamfoz (1 commit)
  • @kouyichi (1 commit)
  • @ooiuuii (1 commit)
  • @KoNit-K (1 commit)
  • @lester076 (1 commit)
  • @Chukwuebuka-2003 (1 commit)
  • @briandevans (1 commit)
  • @LeonSGP43 (1 commit)

Full Changelog: v0.23.1+canary.20261114T064334Z...v0.23.1+canary.20261115T064406Z

Don't miss a new hermes-agent release

NewReleases is sending notifications on new releases.