Skip to content

v0.36.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Sep 18:40
· 39 commits to main since this release
v0.36.0
a938cd0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This release ships the session-first authentication stack — unified session auth across the HTTP API, SSE, and the web GUI, OIDC login with Authorization Code + PKCE and verified RSA ID tokens, and a dedicated /login page with 24-hour idle session expiry — alongside an agent-aware holon CLI control plane, models.dev supplemental catalog auto-drafting, context_not_found diagnostics, and WaitFor/wake correctness fixes.

Supported binary assets for this release are Linux amd64, macOS amd64, and macOS arm64. The macOS app DMG is a universal binary supporting both x86_64 and arm64. The Linux amd64 binary supports Ubuntu 22.04 or newer (glibc 2.35 or newer).

Changes

  • Add the session-first authentication foundation and unify HTTP session-first authentication across API, SSE, and web surfaces (#2744, #2758).
  • Add OIDC session issuance with Authorization Code + PKCE, enable JWT RSA ID token verification, and improve login and session UX with a unified /login page and 24-hour idle session expiry (#2752, #2763, #2772).
  • Add the agent-aware holon CLI control plane (#2746).
  • Auto-draft new models for supported providers from the models.dev supplemental catalog and refresh the model snapshot and artifact (#2749, #2751).
  • Diagnose context_not_found divergence and fall back across doubled-prefix workspace path variants (#2759).
  • Persist the WaitFor fast-path wake promise for terminal task results and unify wait/wake resume authorization (#2745, #2748).
  • Abort orphaned queue entries when an agent is stopped or deleted, and retain the worktree branch when a merge proof fails (#2769, #2765).
  • Make the file-mutation prompt goal-oriented with scenario defaults, tolerate pure-add modify patches against missing targets, and apply turn fallback binding to the ApplyPatch invocation surface (#2764, #2756, #2760).
  • Web GUI: auto-restore exact unread certainty when the read marker catches up, clarify runtime connection status, and address settings review follow-ups (#2771, #2773, #2762).
  • Improve the holon-reviewer template with skill layering and a permission protocol, and make daemon startup readiness explicit (#2774, #2757).

Install

Homebrew:

brew tap holon-run/tap
brew install holon

Direct binary:

curl -L "https://github.com/holon-run/holon/releases/download/v0.36.0/holon-linux-amd64.tar.gz" | tar -xz
chmod +x holon
./holon --help

Replace holon-linux-amd64.tar.gz with holon-darwin-amd64.tar.gz or holon-darwin-arm64.tar.gz on macOS.

Docker:

docker pull ghcr.io/holon-run/holon:0.36.0
Assets 9
Loading