Added
- Agent compatibility diagnostics — Health now detects legacy Hermes data paths and state database schema drift against the Hermes Agent v0.17.0 baseline.
Security
- Local path and process boundaries — plugin mutations and Replay verification now reject traversal and symlink escapes, bound manifest and replay reads, and terminate CLI option parsing before user-controlled values.
- Gateway and profile probes — fixed allowlisted action files, private no-follow file handling, atomic state writes, bounded log reads, and loopback-only local model health probes.
- Error and integrity hardening — unexpected Replay and gateway errors no longer leak details, malformed signatures fail closed, and cache fingerprints use SHA-256.
Fixed
- Fresh-install Costs tab — new installations without state.db or a sessions table now render a normal zero-usage report instead of a blank-page crash.
Changed
- Dependabot triage — compatible frontend minor and patch upgrades remain grouped; major upgrades are raised separately for deliberate migration work.
Verification
- 173 Python tests passed
- Frontend lint and production build passed
- npm audit reported 0 vulnerabilities
- Python package build and wheel smoke passed
- CodeQL passed for Python and JavaScript/TypeScript
- Browser E2E passed across all 19 tabs, profile editing, cron creation in an isolated Hermes home, and a 390px mobile viewport
Full changelog: v0.10.0...v0.11.0