Release v0.21.7

Highlights

• Removed the 50-turn limit for Goals, allowing tasks to resume and continue beyond previous boundaries. (#8421)
• Enabled rendering inline terminal images from model outputs in the interactive CLI for Kitty, Ghostty, and chafa. (#8305)
• Introduced a declarative manifest and command to customize review plans with repository-specific context. (#8401)
• Fixed Live Host release signing by normalizing certificate names to match Electron Builder expectations. (#8579)
• Prevents silent hangs in GitHub-triggered review runs by capping the total lifetime of streaming responses. (#8602)
• Allows managed deployments to route voice transcription through specific HTTP or private-network ASR gateways. (#8350)

Breaking Changes

No known breaking changes.

Complete Change List

Features

• Adds the security.allowedInsecureVoiceBaseUrls setting to allow managed deployments to route voice transcription through specific HTTP or private-network ASR gateways. (#8350) by @rockybot2026
• Enables rendering inline terminal images from model and tool outputs in the interactive CLI with support for Kitty, Ghostty, and chafa. (#8305) by @tlysanhuo
• Introduces a declarative .qwen/review-context.json manifest and the review repo-context command to customize review plans with repository-specific context. (#8401) by @wenshao
• Added observability for REST SSE connections with stable UUIDs and telemetry for stream lifecycle events including slow-client warnings and evictions. (#8572) by @doudouOUC

Bug Fixes

• Fixed the review CLI bundle to include the core package build output, ensuring verification checks run correctly in review phases. (#8612) by @wenshao
• Fixed Live Host release signing by normalizing the Developer ID certificate name to match Electron Builder expectations. (#8579) by @LaZzyMan
• Enhanced sandbox runtime selection to probe availability before use, providing clearer errors when no working runtime is found. (#7734) by @harjothkhara
• Fixed a race condition in autofix workflows by ensuring scan-and-pick runs execute within a single concurrency group. (#8435) by @wenshao
• Fixed file read permissions to resolve symbolic links before checking workspace boundaries, ensuring accurate access decisions. (#8636) by @doudouOUC
• Removed the fixed 50-continuation limit for Goals, allowing them to resume and continue beyond previous turn count boundaries. (#8421) by @qqqys
• Prevents silent hangs in GitHub-triggered /review runs by capping the total lifetime of streaming responses with the new QWEN_STREAM_MAX_LIFETIME_MS setting. (#8602) by @wenshao
• Updates the Web Shell sidebar branch chip immediately after a checkout to reflect the new branch name without waiting for the next poll. (#8600) by @wenshao
• Allows refreshing Web Shell session pages in the browser address bar without authentication errors while keeping API subpaths secured. (#8445) by @BZ-D
• Scopes artifact previews, downloads, and review reports to their owning workspace to prevent access issues after workspace changes. (#8510) by @zjunothing
• fix(cli): accept scope flags in /language ui subcommands (#8633) by @yiliang114
• DingTalk tasks now use a single continuous status card for updates and final answers, preventing clutter and ensuring correct user mentions. (#8565) by @qqqys

Performance

• Reduces /review pipeline latency by removing unnecessary serial delays in the audit loop and verification steps. (#8642) by @wenshao

Documentation

• Added a design document for the legacy code audit skill which applies review machinery to existing merged code. (#8397) by @wenshao

Internal Changes

• Improved test reliability by using a dedicated empty directory for external-path glob tests to prevent timeouts on busy systems. (#8604) by @wenshao

New Contributors

• @rockybot2026 made their first contribution in #8350
• @tlysanhuo made their first contribution in #8305

Full Changelog: v0.21.6...v0.21.7