Release Notes

Bug Fixes

• (ai) Parse history and output tool arguments with serde and reject unknown ones (#4554)
• (client) Keep the logging guard alive until the command finishes (#4528)
• (daemon) Build kv and scripts after a sync, not only history (#4544)
• (daemon,sync) Rebuild search index after atuin sync (#4574)
• (deps) Bump ctutils and tokio for RUSTSEC-2026-0385 and -0386 (#4525)
• (deps) Bump bandit to 1.14.0 and zstd to 0.14 for the open security advisories
• (deps) Bump docs gitpython to 3.2.1 for GHSA-83vg-56qc-22m7 (#4559)
• (deps) Bump pulldown-cmark to 0.13.5 (#4581)
• (docker) Ship patched ca-certificates in the server image (#4522)
• (i18n) Say force pull in the store pull --force help (#4523)
• (login) Restart the daemon on the new key when login changes it (#4555)
• (mcp) Reject arguments a tool doesn't take instead of ignoring them (#4553)
• (pty-proxy) Don't auto-spawn on Linux virtual consoles (#4564)
• (release) Regenerate CONTRIBUTORS on every release (#4561)
• (scripts) Name the editor when launching it fails (#4533)
• (server) Check the password before deleting an account (#4572)
• (sync) Stop re-downloading history the server doesn't have
• (threads) Stop reading claude code api-request blobs as messages (#4538)
• (threads) Keep opencode subagent prompts and other dropped content (#4546)
• (threads) Keep Claude Code recaps, safeguard notices, retried API errors and skill prompts (#4547)
• (threads) Keep omp python runs, file mentions, narration and subagent links (#4548)
• (threads) Keep codex subagent answers and voice transcripts, read compressed rollouts (#4549)
• (threads) Ignore enter_accept for resume (#4573)
• Undo i18n of __internal docs (#4560)

Features

• (cli) Categorized help via clap-couture (#4384)
• (common) Userio::log macros and sinks for user messages (#4562)
• (dist) Add a Windows MSI installer for atuin (#4527)
• (mcp) Install for all configured agents with atuin mcp install (#4557)
• (search) Add shell-up-key-binding keybinding condition (#4552)
• (server) Add admin commands to create, reset and delete users (#4526)
• (threads) Say how long writing the session file took before starting the harness (#4537)
• More correct numeric math (#4585)

Miscellaneous Tasks

• Skip nix build, illumos and package on mono's land/* builds (#4551)
• Move the Windows jobs to Buildkite (#4571)

Performance

• Improve search index performance (#4586)

Refactor

• (client) Report a wrong encryption key through a typed error (#4529)
• (deps) Bump axoupdater from 0.10.0 to 0.10.3 (#4539)
• (deps) Bump futures-util from 0.3.33 to 0.3.34 (#4540)
• (deps) Bump serde_json from 1.0.151 to 1.0.154 (#4541)
• (deps) Bump tokio-util from 0.7.19 to 0.7.20 (#4542)
• (deps) Bump serde_with from 3.21.0 to 3.24.0 (#4543)
• (pty-proxy) Clean up tty ownership checks (#4565)

Testing

• (secrets) Remove the redaction timing tests (#4566)

atuin 18.24.3

Install atuin 18.24.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/atuinsh/atuin/releases/download/v18.24.3/atuin-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/atuinsh/atuin/releases/download/v18.24.3/atuin-installer.ps1 | iex"

Download atuin 18.24.3

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo atuinsh/atuin

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

atuin-server 18.24.3

Install atuin-server 18.24.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/atuinsh/atuin/releases/download/v18.24.3/atuin-server-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/atuinsh/atuin/releases/download/v18.24.3/atuin-server-installer.ps1 | iex"

Download atuin-server 18.24.3

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo atuinsh/atuin

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>