Skip to content

openab-0.10.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Oct 10:34
openab-0.10.0
e284333
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A lightweight, secure, cloud-native ACP harness that bridges Discord and any ACP-compatible coding CLI.

openab 0.10.0 rolls up 7 beta releases and about 60 merged PRs since openab-0.9.0.

Security: the stable agent images are rebuilt on Node.js 22.23.4 (and 24.22.1 for the Kimi image), tracked in #1567 and #1575. Dependency bump for the zip CVEs (#1580).

⚠ Breaking Changes

  • Hermes agent support removed (#1523). Drop it from your config and images.
  • agy-acp prompt timeout is now 20 minutes by default (#1534).
  • Cron: blank thread_id / id now means unset (#1564). Review cron entries that used empty strings. See the updated cron docs (#1562, #1563).

🚀 Features

  • Kimi Code CLI backend (#1429), plus Kimi in the Dockerfile package stage (#1432)
  • ACP server over WebSocket (#1418)
  • Browser control via MCP-over-ACP with a stdio bridge (#1447)
  • OAB MCP Facade — shared openab-mcp crate and a broker loopback HTTP server (#1448), facade-only run mode (#1453), session-aware capability sources (#1454), native Gmail adapter (#1449), and custom HTTP headers for native agents (#1511)
  • LINE WORKS platform adapter (#1456)
  • Reasoning effort slash command for Discord (#1546)
  • Agent Control Plane (groundwork) — openab-cp registry, router and policy (#1469), and the observer/lobby design and protocol scaffold (#1470)
  • Nightly build channel tracking the latest agent CLIs (#1519)

🐛 Bug Fixes

  • Keep the [[ws:]] workspace across a hung-session eviction (#1557)
  • Classify reverse requests before responses in the ACP client (#1540)
  • Serve the MCP facade statelessly, so a stale session never returns 404 (#1578)
  • Separate agy-acp model IDs from display names (#1582)
  • Google Chat: supported keyless ADC and reliable send-once (#1513)
  • Feishu: start the websocket in unified mode (#1443)
  • Clippy under Rust 1.99.0 (#1559)
  • Bump unavailable MiMoCode CLI pin (#1548)

🔒 Hardening

  • Harden the usercron writeback temp file: random name, O_EXCL (#1584)
  • Skip pending-maintainer label writes on fork PR review events (#1442)
  • Pin the Node.js base image by version, add a daily node-security-check workflow and a SECURITY.md (#1570–#1574)

🛠 Docs & CI

  • Cron autonomy and permission scope (#1562), and the cron thread_id/id behavior (#1564)
  • CLI conventions and the OAB MCP Facade operator guide (#1452, #1450)
  • Kiro API-key known issue and multibot thread-owner notes (#1585)
  • Fork PR review policy (#1583)
  • Release PRs include a Review Contract (#1569); pre-beta builds are gated on the main HEAD SHA (#1573)

📦 Images and release notes

  • The stable images were promoted from v0.10.0-beta.7. Fixes merged after beta.7 (#1582, #1583, #1584, #1585) are in this release tag but reach the stable images with the next promotion.

Upgrade notes

Version Info

  • Chart Version: 0.10.0
  • App Version: 0.10.0

Installation

Helm Repository (GitHub Pages)

helm repo add openab https://openabdev.github.io/openab
helm repo update
helm install openab openab/openab --version 0.10.0

OCI Registry

helm install openab oci://ghcr.io/openabdev/charts/openab --version 0.10.0
Assets 8
Loading