Skip to content

Prometheus v0.9.2

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Sep 15:04
· 267 commits to main since this release
v0.9.2
b45be17
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A plain pip install oara-prometheus now runs the daemon and pairs with Beacon.

A plain install runs the daemon

Until now, the web API was an optional extra, so a plain install couldn't start oara daemon at all. In 0.9.2 it's part of the base install:

  • With no config, oara daemon starts in setup mode and prints a 6-digit code to pair Beacon with.
  • Once configured, the daemon runs. Its API needs the token it prints on first start (oara token show prints it again).
  • [full] adds the Slack and Discord gateways, MCP, the browser tool, the Anthropic provider and voice output. pip install 'oara-prometheus[web]' still works, but it no longer adds anything.

Crashes fixed

  • Setup mode: when the web packages were missing, oara daemon with no config crashed with ModuleNotFoundError: No module named 'fastapi'. The message meant for that case was never reached. Now it says which packages are missing and how to install them.
  • MCP: a configured daemon crashed at startup with No module named 'mcp' unless the MCP extra was installed, even with no MCP servers configured. The MCP package is now needed only once you configure an MCP server. Beacon's Connectors endpoint (/api/mcp/servers) also works without it.

Security

  • Prometheus now requires starlette 1.3.1 or later, which fixes CVE-2026-54282, CVE-2026-54283, CVE-2026-48817 and CVE-2026-48818. It also requires python-multipart 0.0.31 or later, which fixes every advisory published against it, up to CVE-2026-53540.
  • python-multipart is now part of the base install; Beacon's Record a Skill upload uses it.
  • Upgrading Prometheus with pip also upgrades an older starlette or python-multipart.

Known issue

  • On Intel Macs, pip builds cryptography from source, because its releases since 49.0 ship no Intel-Mac wheel. That needs Rust and OpenSSL; with Homebrew's OpenSSL, set OPENSSL_DIR=$(brew --prefix openssl@3). On Python 3.14, watchdog also builds from source, which needs Xcode's command-line tools.

Install

pip install oara-prometheus           # the daemon, its web API, the CLI and Telegram
pip install 'oara-prometheus[full]'   # adds Slack, Discord, MCP, the browser tool, Anthropic and voice output

Python 3.11 or later. On PyPI: oara-prometheus 0.9.2.

Assets 4
Loading