Skip to content

Talos 0.19.19-alpha

Latest
Latest

Choose a tag to compare

View all tags
@morningstarnasser morningstarnasser released this 18 Sep 12:56
· 11 commits to main since this release
v0.19.19-alpha
b21c425

Talos 0.19.19-alpha

This maintenance release fixes how Telegram runs close out. Telegram only ever shows a message's latest state, so an interim state the operator had read was effectively deleted by the next edit. The end of a run now goes out as a compact append-only receipt (duration, tool actions, result status), sent after the answer's confirmed delivery and never edited. A run parked at an approval is not finished, so it gets no receipt.

  • The run's summary now shows exactly once: with the receipt delivered, the frozen display keeps the plain work trail and the receipt alone carries the summary. If the receipt cannot be sent, the display carries the full final state as before.
  • Callback taps are acknowledged when they arrive instead of after queueing: an approval button that aged in the worker queue made Telegram reject the late answerCallbackQuery with a 400, and the error cascade marked the queued turn failed. A stale or duplicate ack is now cosmetic, and a reply that cannot edit the old approval card is delivered as a fresh message instead.
  • Telegram's description from the error response body is now logged. A bare "400 Bad Request" was undiagnosable; the bot token in the URL stays redacted.
  • README, changelog and website release metadata are aligned in the source tree.

Linux and macOS GitHub CI passed for this release commit.

Validation: 2,817 source tests collected (sanitized release source: 2,816 passed, 1 environment skip); 254/254 adversarial cases. OSV: no critical or high findings (three medium/low advisories against pinned versions: idna 3.9.0 → 3.15; pygments 2.9.0, development-only → 2.15.1/2.20.0). Archive signature verified; tampered bytes rejected. Full live-model 44-case E2E was not repeated: the change sits in the Telegram transport, which the E2E harness does not wire.

The attached archive is signed with the existing Ed25519 release key. Verify its SHA-256 and signature as documented in SECURITY.md. Private profiles, credentials and operator data are excluded.

Published at https://talos-agent.ch. Website downloads match the signed GitHub assets byte-for-byte (HTTPS read-back, SHA-256 and Ed25519 verified); the site's status.json and installer now serve 0.19.19-alpha. Previous release downloads remain available.

Assets 5
Loading