v1.6.5

10/06/2026

Changed

• Updated Node to 26.10.0 and compatible AI CLI, developer-tool and Python packages from official upstream releases.
• Updated Vercel to official 62.4.0 and Apprise to 2.0.1. Kept legacy email encryption settings working in the notification integration.
• Added source checks for pull requests and master, plus scheduled released-image dependency scans.
• Added weekly Docker and GitHub Actions dependency update checks.
• Kept the existing CloudCLI and plugin artifacts while official replacements lack the required account, reverse-proxy and notification features. See deferred replacements.

Fixed

• Corrected the ARM-native build roadmap status and the optional Docker-client image examples.
• Excluded local execution state from Git and Docker build contexts.
• Kept the historical Junie applicability guard separate from current-release runtime checks.
• Fixed Linux advisory checks that could fail when a library lookup closed its output pipe early.

Security

• Official Vercel 62.4.0 includes smol-toml 1.5.2, affected by CVE-2026-85730 and GHSA-r4xh-jqrq-34v2. These are accepted upstream vulnerabilities, not fixed.
• Dependency scans now retain accepted upstream vulnerabilities with raw severity, installed versions and available fixes. Acceptance does not mean fixed. Retained modified third-party components are identified separately from official releases.
• Kept HolyClaude source checks, artifact integrity, native runtime tests and promotion checks blocking. Historical v1.6.4 approvals remain unchanged.