v0.9.3

Dependencies

• Bump Claude Code to 2.1.205
• Bump klauspost/compress to 1.19.0
• Bump golang.org/x/crypto to 0.54.0
• Bump @anthropic-ai/claude-agent-sdk to 0.3.205
• Dependency bumps in /ui and /agent-runner (7 bumps)

v0.9.2

Documentation

• Update default model to claude-sonnet-5 (#235)

Dependencies

• Bump claude-agent-sdk 0.3.197, claude code 2.1.197, agent-browser v0.31.1 (#234)
• Bump react-router-dom from 7.18.0 to 7.18.1 in /ui (#233)
• Bump github.com/nats-io/nats-server/v2 to 2.14.3 (#232)

v0.9.1

🔒 Security

• Fix upload filename path traversal out of uploads/ — a client-controlled Telegram document filename could escape the agent workspace upload directory and plant/overwrite files the agent later consumes (e.g. CLAUDE.md), a stored instruction-injection vector. Reachable by any user who can message the bot under the default allow-all config. Reported privately by @tonghuaroot — thanks! (#228)

🧹 Maintenance

• Bump Claude Code CLI to 2.1.193 and agent-browser to v0.31.0 (#230)
• Modernize bot.go string/slice idioms (#229)

⬆️ Dependencies

• Dependency updates (6 bumps): @anthropic-ai/claude-agent-sdk, vite, @types/node, @vitejs/plugin-react, actions/checkout, modernc.org/sqlite (#220, #221, #223, #224, #226, #227)

v0.9.0

A feature release: configurable container hardening + agent-browser switched to its typed MCP interface.

Features

• Configurable Docker hardening for agent containers (#215) — new reloadable defaults.security block (per-agent overridable) with a "Balanced" default profile: no-new-privileges, cap-drop ALL + minimal add-back, pids-limit, hardened tmpfs, optional memory/CPU/readonly-rootfs. Also drops the unused chromium-sandbox setuid helper and forces binary-only nix (max-jobs = 0) so hardening needs no CAP_SYS_ADMIN.
• agent-browser → typed MCP interface (#218) — bump to v0.28.0 and drive the browser exclusively through agent-browser mcp (tools surface as mcp__agent-browser__*, profile via AGENT_BROWSER_MCP, default core). Removes the legacy Bash-command path and the injected usage-guide skill after verifying byte-identical output at the same context cost.

Dependencies

• Bump Claude CLI 2.1.178 → 2.1.183 and @anthropic-ai/claude-agent-sdk → 0.3.183 (#210, #216)
• Bump github.com/moby/moby/api → 1.55.0 (#211) and github.com/moby/moby/client → 0.5.0 (#212)
• Bump react-router-dom → 7.18.0 (#209), @types/node → 26.0.0 (#217)
• Transitive bumps to clear Dependabot alerts (undici, hono, @babel/core)

v0.8.28

Dependencies

• Bump @anthropic-ai/claude-agent-sdk 0.3.177 → 0.3.178 and Claude CLI 2.1.177 → 2.1.178 (#205)
• Bump github.com/mymmrac/telego 1.9.0 → 1.10.0 (#204)
• Bump vitest 4.1.8 → 4.1.9 in agent-runner and ui (#206, #207)

A dependency-maintenance release.

v0.8.27

Dependencies

• Bump @anthropic-ai/claude-agent-sdk 0.3.173 → 0.3.177 and Claude CLI 2.1.173 → 2.1.177
• Bump esbuild 0.28.0 → 0.28.1 (#203)
• Bump @types/node 25.9.2 → 25.9.3 (#201)

A dependency-maintenance release.

v0.8.26

Dependencies

• Bump @anthropic-ai/claude-agent-sdk 0.3.170 → 0.3.173 and Claude CLI 2.1.170 → 2.1.173
• Bump agent-browser v0.27.1 → v0.27.2

A dependency-maintenance release.

v0.8.25

Dependencies

• Bump @anthropic-ai/claude-agent-sdk to 0.3.170 and Claude CLI to 2.1.170
• Bump modernc.org/sqlite 1.51.0 → 1.52.0 (#197)
• Bump golang.org/x/crypto 0.52.0 → 0.53.0 (#195)
• Bump @types/node 25.9.1 → 25.9.2 (#196)

A dependency-maintenance release.

v0.8.24

Dependencies

• Bump @anthropic-ai/claude-agent-sdk to 0.3.168 and Claude CLI to 2.1.168
• Bump @types/react 19.2.15 → 19.2.17 (#194)

A dependency-maintenance release.

v0.8.23

Dependencies

• Bump @anthropic-ai/claude-agent-sdk to 0.3.165 and Claude CLI to 2.1.165
• Bump hono 4.12.18 → 4.12.23 — clears the moderate Hono security advisories (#191)
• Bump react-router-dom 7.16.0 → 7.17.0 (#193)

A dependency-maintenance release; clears all outstanding Dependabot security alerts.