Skip to content

v0.2.75

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Nov 18:51
· 3 commits to main since this release
v0.2.75
ce3d9bb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[0.2.75] - 2026-11-03

v0.2.74 was prepared but never published to npm. Its changes, listed under 0.2.74 below, are first published in this release.

Changed

  • Moved the Cyrus Inbox plugin package to a separately maintained private repository. The CLI, runtime and post_message_to_codex tool are unchanged. (#1558)

Fixed

  • Managed GitHub commands now refuse removed, expired or unreadable installation credentials instead of falling back to stale session or cached authentication; unmanaged self-host authentication is preserved. (CYPACK-1522, #1487)
  • GitHub webhook deliveries from the three newly published IP ranges are now accepted by the fallback allowlist, preventing affected GitHub mentions from being rejected. (CYPACK-1611, #1573)
  • If the Cloudflare tunnel process exits unexpectedly after connecting, Cyrus now restarts it automatically instead of staying unreachable until you restart Cyrus. Restarts back off from 1 second up to 60 seconds between attempts. After 10 consecutive failed restarts Cyrus stops retrying and logs an error asking you to restart it. Stopping Cyrus, or a tunnel that fails during startup, no longer leaves a cloudflared process running. (#1566)
  • Label routing now respects a repository's teamKeys. An issue labeled Design in one Linear team no longer routes to another team's repository that routes its own Design label, and no longer starts a multi-repository session against both. Repositories without teamKeys keep matching their routing labels across the whole workspace. (#1393, #1532)
  • Feedback sent with linear_agent_give_feedback now reaches child sessions that were restored after a restart. Before, it was dropped with a not found in any repository error and the child never resumed. (#1562)

Security

  • Updated Axios to 1.21.0 and its follow-redirects dependency to 1.16.2, fixing a high-severity custom credential disclosure advisory and restoring a zero-advisory audit. (CYPACK-1608, #1569)
  • Patched high-severity Zod collection-validation and body-parser compressed-body denial-of-service vulnerabilities plus fast-uri URL handling issues, while keeping upgraded Cursor session state under the Cyrus home directory. (CYPACK-1603, #1563)
  • Updated Fastify to 5.12.7 across the CLI dependency graph, fixing a header-schema validation bypass and restoring a zero-advisory audit. (CYPACK-1597, #1555)

Packages

cyrus-cloudflare-tunnel-client

  • cyrus-cloudflare-tunnel-client@0.2.75

cyrus-mcp-tools

  • cyrus-mcp-tools@0.2.75

cyrus-core

  • cyrus-core@0.2.75

cyrus-claude-runner

  • cyrus-claude-runner@0.2.75

cyrus-config-updater

  • cyrus-config-updater@0.2.75

cyrus-linear-event-transport

  • cyrus-linear-event-transport@0.2.75

cyrus-github-event-transport

  • cyrus-github-event-transport@0.2.75

cyrus-gitlab-event-transport

  • cyrus-gitlab-event-transport@0.2.75

cyrus-slack-event-transport

  • cyrus-slack-event-transport@0.2.75

cyrus-zulip-event-transport

  • cyrus-zulip-event-transport@0.2.75

cyrus-simple-agent-runner

  • cyrus-simple-agent-runner@0.2.75

cyrus-opencode-runner

  • cyrus-opencode-runner@0.2.75

cyrus-codex-runner

  • cyrus-codex-runner@0.2.75

cyrus-cursor-runner

  • cyrus-cursor-runner@0.2.75

cyrus-gemini-runner

  • cyrus-gemini-runner@0.2.75

cyrus-edge-worker

  • cyrus-edge-worker@0.2.75

cyrus-ai

Assets 2
Loading