Skip to content

v0.41.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Aug 09:05
· 24 commits to main since this release
v0.41.0
0e3e93f
This commit was signed with the committer’s verified signature.
dinstein dinstein
GPG key ID: CBF0617996B20946
Verified
Learn about vigilant mode.

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

  • tidy-gateway: reconcile four stale comments and one doubled comparison by @dinstein in #292
  • diag: an opt-in, loopback-only pprof endpoint by @dinstein in #291
  • docs: fix verified user-facing staleness in README and guide by @dinstein in #293
  • refactor(pipeline,gateway): drop dead InputSchema field and re-scan by @dinstein in #294
  • fix: one reader for pasted client config, shared by the GUI preview and server add --stdin by @dinstein in #297
  • refactor: one file lock for seven packages, not fourteen by @dinstein in #296
  • fix(netguard): close the RFC 8215 local-use NAT64 SSRF gap by @dinstein in #298
  • chore: tidy guards and pins by @dinstein in #295
  • audit-skill-tidy: reconcile the security-audit skill with the tree by @dinstein in #300
  • diag: refuse pprof requests DNS rebinding can forge by @dinstein in #299
  • readme-polish: self-updating badge and a lighter front page by @dinstein in #302
  • sec-audit-fixes: CRITICAL & HIGH findings from the security sweep by @dinstein in #301
  • sec-audit-fixes-2: MEDIUM findings — container-escape guard + credential-in-logs by @dinstein in #304

Full Changelog: v0.40.3...v0.41.0

Contributors

dinstein
Assets 14
Loading