New
- Two-factor step-up opens full screen, and the MCP connect dialog uses a split layout with the details beside the form.
Fixed
- Slack: in a channel thread, the agent runs only when someone tags it.
- The /download page shows the original phone screenshots on the mobile card again.
- Mobile over-the-air publishing no longer fails on the update lookup step.
Security
- Updated the shell-quote dependency to 1.11.0 (CVE-2026-102422).
What's Changed
- chore(release): staging VERSION → 0.13.53 [skip ci] by @github-actions[bot] in #9315
- Hotfix to staging: Slack tag-only threads, MFA step-up modal, /download screenshots, OTA publish by @sutharjay1 in #9354
- test(release-gate): fix five release-gate test races and drifts against staging by @sutharjay1 in #9445
- test(release-gate): fix the second round of staging release-gate failures by @sutharjay1 in #9450
- test(release-gate): fix the round-3 staging gate failures by @sutharjay1 in #9456
- test(release-gate): fix the round-4 staging gate failures by @sutharjay1 in #9462
- test(release-gate): journey 27 steer on a deployed box by @sutharjay1 in #9469
- Release v0.13.53 — Full-screen MFA step-up, quieter Slack threads, and a security fix by @github-actions[bot] in #9443
Full Changelog: v0.13.52...v0.13.53