github elie222/rakazo v0.11.0
Rakazo v0.11.0
on GitHub

41 minutes ago

Security

  • Updated third-party dependencies with known vulnerabilities, including the HTTP client used by model, mail and scraping connections, the mail sender, and XML and Markdown parsers.
  • The development launcher's database cleanup accepts only database names it generated and quotes them, so forged database metadata can no longer inject SQL or point the cleanup at another folder. This affects source checkouts only.

Added

  • On Apple silicon Macs running macOS 26 or newer, the desktop app's This computer runs without Docker. The app downloads what it needs the first time you pick it, and each bot's computer runs as its own small VM with a firewall that lets it reach the internet but not your Mac or local network. If you already run This computer on Docker, the app asks once whether to move your bots and data; Docker is stopped, not removed. Intel Macs, older macOS, Linux and Windows keep using Docker (This computer on a Mac without Docker).
  • Message your bots from Microsoft Teams direct messages after linking your Teams account (messaging apps).
  • Routines can watch a public HTTPS address and run only when its response changes, without starting a computer (routines).
  • When This computer needs Docker and it is missing, the desktop app offers one button to download the right Docker Desktop installer, opens Docker if it is stopped, and continues setup on its own once Docker is running.

Changed

  • Webhook and email routine runs now follow the owner's approval mode and Always allow list instead of asking on every step. Text in a webhook or email can try to steer the bot, so a tool on your Always allow list will run on it without a person looking (approvals).
  • When a bot needs you to use its computer, its card shows a still of the screen with Skip, I'm done and Take control, and folds into one line once settled.
  • A bot's chat no longer shows the prompt that started a webhook, email or chat-message routine; it shows only what the bot does.
  • Your chat bubbles stay close to the bot's avatar color, and the first bot created at sign-up starts orange.
  • Answered questions stay in the chat as dimmed cards, with your reply shown once in its own message, and the iOS inbox controls sit closer to the sidebar toggle.
  • Mobile settings are a short hub, with display and device preferences on a new General page and sign-in and security on an Account page opened by tapping your name.
  • Usage shows when monthly computer hours next reset separately from the plan's renewal date, including on annual plans.
  • InstaBox computers start at their plan's computer size. A stopped computer moves to its plan's size when it next starts, which discards its paused memory but keeps its files.
  • Bots see every open scratchpad item at the start of a run, and know the scratchpad's title and notes size limits before writing.
  • The sidebar updates when something changes instead of polling, and computer update progress is checked quickly only while an update is running.
  • Deploys are smoother: the old API finishes in-flight requests before exiting, and apps spread out their reconnects and retries afterwards.
  • Updating a self-hosted server downloads only the app's own files when its dependencies haven't changed, instead of the whole image.
  • The worker spends less CPU on memory cleanup under load.
  • Self-host monitoring raises the CPU overload alert when work actually waits for a processor rather than on a high load average, and says which measure tripped it.

Fixed

  • A Docker computer that comes up unable to write its home folder, such as after Docker or the host restarts, is restarted automatically instead of failing every run.
  • Docker computers start on Windows hosts instead of failing a home folder permission check.
  • Android message notifications no longer arrive blank while the app is in the background.
  • Compatible model connections whose label already starts with the service name no longer repeat it.
  • Chat tables sort decimals written without a leading zero, such as .5, in numeric order.

Self-host upgrade notes

  • Servers on Apple silicon Macs with macOS 26 or newer can run computers as VMs instead of Docker containers with SANDBOX_PROVIDER=local-vm, tuned by LOCAL_VM_CLI, LOCAL_VM_COMPUTER_IMAGE, LOCAL_VM_CPUS and LOCAL_VM_MEMORY (computer providers).
  • The computer image now includes nftables, which local-vm requires; no action is needed.
  • To enable Microsoft Teams, set TEAMS_APP_ID, TEAMS_APP_PASSWORD and TEAMS_APP_TENANT_ID (integrations).
  • The bundled Compose files start the worker with --max-semi-space-size=64. If you maintain your own Compose file, add it to the worker's start command for the same CPU saving.

What's Changed

  • Show the computer's screen and answers on the needs-you card by @elie222 in #4277
  • Stop Android message pushes from arriving blank by @nilisteinbock in #4295
  • Restart a Docker computer that cannot write its home folder by @Chawron in #4301
  • docs: explain which model subscriptions work with Rakazo by @elie222 in #4307
  • Add Microsoft Teams direct messaging by @elie222 in #4311
  • Let webhook and email runs follow the owner's approval mode by @elie222 in #4178
  • Declare the scratchpad tools' size limits by @Chawron in #4319
  • Cut the worker's garbage collection with a larger young generation by @elie222 in #4318
  • Check the sidebar's bot list every 10 seconds instead of every 3 by @elie222 in #4320
  • deps: Patch vulnerable dependencies flagged by Snyk by @elie222 in #4290
  • Poll computer updates quickly only while one is in progress by @elie222 in #4322
  • Keep chat bubbles close to the bot's avatar color; first bot is orange by @elie222 in #4310
  • Group mobile settings into a short hub with General and Account pages by @elie222 in #4323
  • Show when monthly computer hours reset on annual plans by @elie222 in #4279
  • Hide what woke a bot from its chat by @elie222 in #4180
  • Push sidebar changes instead of polling by @elie222 in #4321
  • Update translation catalogs by @elie222 in #4248
  • fix(sandbox-supervisor): skip POSIX mode checks on Windows by @EryonHu in #4330
  • Show a bot every open scratchpad item by @Chawron in #4317
  • Watch HTTPS endpoints without starting a computer by @elie222 in #4280
  • Guide Docker setup on the desktop's This computer option by @elie222 in #4325
  • fix: Validate development database cleanup targets by @elie222 in #4326
  • Start InstaBox computers at their plan's computer size by @CarmenDou in #4333
  • Let a replaced API finish its requests during a deploy by @elie222 in #4343
  • Use Codex for PR screenshots and reuse E2E images by @elie222 in #4341
  • Keep the app image's dependencies in their own layer, compressed with zstd by @elie222 in #4344
  • Alert on CPU pressure instead of load average by @elie222 in #4345
  • Spread client reconnects and retries after a deploy by @elie222 in #4346
  • Ship pnpm's native binary in the app image by @elie222 in #4347
  • Run This computer on Apple silicon Macs without Docker by @elie222 in #4324
  • Remove duplicate replies and tighten iOS sidebar spacing by @elie222 in #4315
  • Sort leading-dot decimals numerically in chat tables by @yxr-2025 in #4354
  • Cancel unused OpenRouter usage response bodies on 404 by @yxr-2025 in #4357
  • Avoid repeating the service name in compatible connections by @yxr-2025 in #4356
  • Pin retry jitter in the computer update polling test by @elie222 in #4351
  • fix: use connected model keys instead of hosted credits by @elie222 in #4360
  • Release v0.11.0 by @elie222 in #4349

New Contributors

Full Changelog: v0.10.0...v0.11.0

Check out latest releases or
releases around elie222/rakazo v0.11.0

Don't miss a new rakazo release

NewReleases is sending notifications on new releases.

Get notifications