Skip to content

Portable Hermes Agent v1.3.6

Choose a tag to compare

View all tags
@aivrar aivrar released this 06 Jul 15:33
· 38 commits to main since this release
v1.3.6
b53285d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Portable Hermes Agent v1.3.6

This release supersedes v1.3.5 with the nested npm security fixes that were surfaced after enabling Dependabot security alerts.

Security Updates

  • Resolved the WhatsApp bridge Dependabot alerts for Baileys, ws, qs, and protobufjs.
  • Resolved the Photon sidecar OpenTelemetry core advisory by forcing the patched transitive resolution.
  • Expanded the OSV scanner workflow to cover all tracked lockfiles, including nested scripts/whatsapp-bridge/package-lock.json and plugins/platforms/photon/sidecar/package-lock.json.
  • Closed superseded Dependabot PRs #39 and #40 after the combined fix landed in #41.

Download Links

Verification

  • GitHub PR checks passed for #41, including all Python test slices, docs-site, TypeScript, supply-chain, and OSV scanning.
  • Post-merge main CI passed.
  • Local OSV scan across all five lockfiles reported 0 findings.
  • Nested npm audits for WhatsApp bridge and Photon sidecar reported 0 vulnerabilities.
  • Release ZIP audit passed: 4,034 entries, required launcher/update/manual/updater files present, and no .git, .github, venv, .venv, python_embedded, node_modules, .hermes, or tests directories.

SHA256

  • portable-hermes-agent-v1.3.6.zip: 55b8e63be8c8de8c7df6defbb61726379d63a147f9d4787f29bd1595cf95ce9f
  • Portable-Hermes-Agent-Manual.pdf: 91416f72ad2d0d79f4a65941b3335940f687d3356bc795b104d4602f765df41a

Full Changelog: v1.3.5...v1.3.6

Assets 4
Loading