v0.21.0

What's Changed

• Close v0.20.1 release tracking by @thrashr888 in #134
• Close verified main CI follow-up by @thrashr888 in #135
• Configure Git identity for agent commits by @thrashr888 in #136
• fix: make Docker build cache context-aware by @thrashr888 in #137
• fix: clarify desktop server recovery state by @thrashr888 in #138
• feat(desktop): persist benchmark history by @thrashr888 in #140
• feat(desktop): add Parallel Jobs UI by @thrashr888 in #139
• feat(images): add cache management controls by @thrashr888 in #141
• feat: add sandbox config import and export flows by @thrashr888 in #142
• feat: add sandbox Git operations API by @thrashr888 in #143
• feat: add durable agent task CRUD API by @thrashr888 in #145
• feat: add asciicast session replay by @thrashr888 in #144
• feat(tasks): isolate worker sandboxes and git worktrees by @thrashr888 in #146
• feat(tasks): add parallel task coordinator by @thrashr888 in #147
• feat(backends): expose per-sandbox selection by @thrashr888 in #148
• feat(desktop): bundle and manage AgentKernel sidecar by @thrashr888 in #149
• feat(scheduling): enforce workspace lifecycle policies by @thrashr888 in #151
• perf(apple): remove redundant startup delay by @thrashr888 in #153
• ci: enforce backend and provider compatibility by @thrashr888 in #150
• feat: add daemon-integrated cron job scheduler by @thrashr888 in #152
• feat(desktop): add managed SSH tunnels by @thrashr888 in #154
• feat(llm): add tenant spend dashboard by @thrashr888 in #157
• feat: add devcontainer support by @thrashr888 in #156
• feat(desktop): activate Cedar policies locally by @thrashr888 in #155
• feat(desktop): manage local server lifecycle by @thrashr888 in #162
• feat: add per-sandbox Git worktree isolation by @thrashr888 in #160
• feat(vscode): add AgentKernel remote extension by @thrashr888 in #163
• perf: cache VM manager config and policy setup by @thrashr888 in #164
• feat(enterprise): add SCIM provisioning by @thrashr888 in #159
• feat(llm): add model governance controls by @thrashr888 in #158
• feat(firecracker): safe copy-on-write rootfs staging by @thrashr888 in #165
• feat(enterprise): enforce resource quotas by @thrashr888 in #161
• ci: fix provider live smoke validation by @thrashr888 in #166
• fix(scim): repair existing durable schemas by @thrashr888 in #167
• fix(firecracker): reap orphaned COW rootfs artifacts by @thrashr888 in #168
• fix(api): persist sandbox volume mounts by @thrashr888 in #169
• feat: register sandbox services in Kubernetes and Nomad by @thrashr888 in #170
• fix: harden Kubernetes sandbox resource identity by @thrashr888 in #171
• feat(network): add managed Docker and Podman bridges by @thrashr888 in #172
• fix(test): keep runtime bypass removal isolated by @thrashr888 in #174
• fix(test): use the hermetic VMM constructor by @thrashr888 in #175
• feat(firecracker): add full-state pause, resume, and fork by @thrashr888 in #173
• Fix delegated start manifest cleanup by @thrashr888 in #176
• Bind full-state checkpoints to sandbox UUIDs by @thrashr888 in #177
• Route Firecracker file operations through server by @thrashr888 in #178
• Add secure local control socket by @thrashr888 in #179
• test: exercise full-state lifecycle through VmManager on native KVM by @thrashr888 in #180
• feat: persist Firecracker writable disk lineage by @thrashr888 in #181
• feat: add full-state checkpoint quotas and GC by @thrashr888 in #182
• docs: add adoption guides and enforce accurate, warning-free builds by @thrashr888 in #185
• Bump rustls and wasmtime to fix RustSec advisories by @thrashr888 in #190
• chore(deps): bump shell-quote from 1.10.0 to 1.12.0 in /scripts by @dependabot[bot] in #193
• chore(deps): bump source-map-js from 1.2.1 to 1.2.2 in /sdk/nodejs by @dependabot[bot] in #192
• chore(deps): bump smol-toml from 1.6.1 to 1.9.1 in /scripts by @dependabot[bot] in #184
• chore(deps): bump axios from 1.19.0 to 1.20.0 in /scripts by @dependabot[bot] in #187
• chore(deps): bump undici from 7.29.0 to 7.30.0 in /scripts by @dependabot[bot] in #186
• chore(deps): bump @grpc/grpc-js from 1.14.4 to 1.14.5 in /scripts by @dependabot[bot] in #188
• chore(deps): bump brace-expansion from 5.0.9 to 5.0.12 in /scripts by @dependabot[bot] in #189
• fix: remove vulnerable RSA dependency and audit exemptions by @thrashr888 in #195
• fix(deps): patch residual npm advisories and backport braces guards by @thrashr888 in #194
• fix(pi): require patched host releases by @thrashr888 in #196
• fix: restore kernel provenance and harden Cloud Hypervisor (#183) by @thrashr888 in #191
• Add KVM hyper-V support to Cloud Hypervisor and skip smoke test on macOS by @sangam14 in #183
• fix(deps): patch Quinn protocol security advisories by @thrashr888 in #197
• fix(ci): lock coherent minimum Pi host fixture by @thrashr888 in #199
• chore(release): prepare v0.21.0 by @thrashr888 in #198

New Contributors

• @sangam14 made their first contribution in #183

Full Changelog: v0.20.1...v0.21.0

Security

The JavaScript agent bridge includes a tested vendored braces backport mitigating the deeply nested pattern stack-exhaustion issue GHSA-vfj7-8cjw-p6xm / CVE-2026-93687. As of October 13, 2026, no patched upstream release is available: npm's latest braces is 3.0.3, which remains in the advisory's affected range. Source-bridge consumers must retain scripts/vendor/braces and install the repository dependencies to use the backport.