Skip to content

v1.0.210

Choose a tag to compare

@github-actions github-actions released this 21 May 14:55
· 65 commits to main since this release

✨ New: New chats land at the end of the tab strip

Opening a fresh chat from the + menu (Claude Code / Claude 2 / Codex / DeepSeek / Kimi / Ollama) or from the sidebar's session list now appends the tab to the end, instead of inserting it next to whatever you had active. Switching engines mid-thread no longer breaks your tab layout in two.

Fork keeps the old behavior — a forked chat still lands right next to its parent, because that adjacency is the point of forking.

✨ New: Rerun an exited terminal where your eyes already are

Exited PTY bubbles in the Console panel show a center-mounted Rerun hint on hover now. The action used to live in the top-right corner of the black xterm chrome where nobody could see it.

🐛 Fix: DiffView search no longer expands to the whole line

When you selected text inside a DiffView and hit search, the query used to silently expand to the entire enclosing line. We've split the selection-toolbar payload in two:

  • selectedText — the literal selection, used for Search and DB snapshots
  • lineSnapshot — line-expanded text, used only for preview cards and AI context

The same root cause also dropped the literal selection from comments created via CodeViewer / DiffView / Interactive Markdown — those now correctly persist the exact text you highlighted.

📦 Misc: 15 CVE patches via Next / ws / brace-expansion

Patch-level dependency bumps that clear 15 CVEs without any API surface change:

  • next 16.2.4 → 16.2.6 — 13 CVEs across middleware bypass, SSRF over WebSocket upgrades, cache-component DoS, CSP-nonce XSS, cache poisoning, and image-opt DoS. The website (cocking.cc) is the public-internet exposure surface for these.
  • ws 8.19.0 → 8.20.1 — uninitialized memory disclosure
  • brace-expansion 5.0.5 → 5.0.6 — large-numeric-range DoS bypass

npm audit reports 0 vulnerabilities across root, website, and e2b manifests.