v2.5.1 — Post-release hardening
Post-release hardening and polish on top of the v2.5.0 rebrand. No breaking changes.
Added
- Mobile agent picker in the Chat Panel — switch the active agent without leaving the conversation view.
Security
- Dependency security patches via pnpm overrides:
@xmldom/xmldom >=0.8.13,hono >=4.12.14,@hono/node-server >=1.19.13,postcss >=8.5.10. - Auth hardening, data validation, WebSocket safety, and API shape consistency (deep audit follow-up).
- Fixed CSRF token race condition on realtime-updates session restore.
Changed
- Reports now always produce a markdown deliverable; the design-checkpoint workflow and
tools/ppt_team_agentsubmodule have been removed. templates/AGENTS-octooffice.mdrestored sopnpm setupworks on a fresh clone.- Personal identifiers in UI placeholders and test fixtures replaced with neutral RFC 5737 documentation values.
- Community health files and
package.jsonmetadata aligned.
Fixed
pnpm buildregression from dormant-code cleanup.- Auth noise, New Pack dialog race condition,
branchesendpoint. - E2E test suite: pack-selector contamination, department ID casing, settings language selector, SetupWizard overlay, WebSocket UI test flakiness.
- Mobile UI polish: header, bottom sheet, tab bar typography, Projects view, Mission Control tabs, Terminal panel header.
Upgrade
git pull
pnpm install
pnpm devNo database migrations required.