This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Light signalThe speech stack has been refactored into independent Kokoro TTS and Whisper STT plugins, removing legacy speech settings and APIs.
Why it matters: Legacy speech settings and APIs are removed; migrate configurations to the _kokoro_tts and _whisper_stt plugins to maintain functionality.
Summary
AI summaryUpdates Plugin system improvements, Surface and UI improvements, and Release Notes across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Browser, Desktop, and computer‑use screenshots are now ephemeral and context‑scoped by default. Browser, Desktop, and computer‑use screenshots are now ephemeral and context‑scoped by default. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Breaking | Medium |
Legacy speech settings and APIs removed; use _kokoro_tts and _whisper_stt plugins instead. Legacy speech settings and APIs removed; use _kokoro_tts and _whisper_stt plugins instead. Source: llm_adapter@2026-05-22 Confidence: low |
— |
| Feature | Medium |
Added user‑configurable timezone and 12/24‑hour clock preference affecting scheduler, notifications, backups, timestamps, and UI time displays. Added user‑configurable timezone and 12/24‑hour clock preference affecting scheduler, notifications, backups, timestamps, and UI time displays. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
Model preset deep‑merging now preserves custom context windows, rate limits, and nested kwargs across switches. Model preset deep‑merging now preserves custom context windows, rate limits, and nested kwargs across switches. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
Plugin activation toggle simplified to a one‑click ON/OFF switch. Plugin activation toggle simplified to a one‑click ON/OFF switch. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
Skill visibility controls allow hiding skills from the model‑facing catalog via Skills selector. Skill visibility controls allow hiding skills from the model‑facing catalog via Skills selector. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
New `skills_activate` endpoint enables connector clients to activate skills in live chats. New `skills_activate` endpoint enables connector clients to activate skills in live chats. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
File Browser routes Markdown files to Editor, txt/Office documents to Desktop, and browser‑renderable files to Browser. File Browser routes Markdown files to Editor, txt/Office documents to Desktop, and browser‑renderable files to Browser. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
Unified header action rail across Browser, Desktop, and Editor floating modals with consistent ordering. Unified header action rail across Browser, Desktop, and Editor floating modals with consistent ordering. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
Icon markers now render as Material Symbols in composer progress overlays. Icon markers now render as Material Symbols in composer progress overlays. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
Browser screenshots open in the image viewer; live previews still open the Browser surface. Browser screenshots open in the image viewer; live previews still open the Browser surface. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
Codex OAuth setup UI gains Main/Utility model selectors and account quota usage bars on the dashboard. Codex OAuth setup UI gains Main/Utility model selectors and account quota usage bars on the dashboard. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
Clearer settings and recovery guidance when host‑browser runtime fails, directing users back to internal Docker browser. Clearer settings and recovery guidance when host‑browser runtime fails, directing users back to internal Docker browser. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Performance | Medium |
Scanner prompts calibrated around demonstrated risk to reduce false positives. Scanner prompts calibrated around demonstrated risk to reduce false positives. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Performance | Medium |
Error retry count for _error_retry plugin now configurable via settings. Error retry count for _error_retry plugin now configurable via settings. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Bugfix | Medium |
Fixed message queue persistence after auto‑send. Fixed message queue persistence after auto‑send. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Bugfix | Medium |
WhatsApp connector now includes the sender number in user messages. WhatsApp connector now includes the sender number in user messages. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Bugfix | Medium |
Updated Computer Use rearm guidance to reference the new `/computer-use on` CLI access model. Updated Computer Use rearm guidance to reference the new `/computer-use on` CLI access model. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Refactor | Medium |
Speech stack refactored into independent Kokoro TTS and Whisper STT plugins, removing legacy speech settings and APIs. Speech stack refactored into independent Kokoro TTS and Whisper STT plugins, removing legacy speech settings and APIs. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Refactor | Medium |
'document_artifact' renamed to 'office_artifact'; old name removed. 'document_artifact' renamed to 'office_artifact'; old name removed. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Refactor | Medium |
Text Editor now owns Markdown saves, canvas‑open intent, refresh, and stale‑save protection. Text Editor now owns Markdown saves, canvas‑open intent, refresh, and stale‑save protection. Source: llm_adapter@2026-05-22 Confidence: high |
— |
Full changelog
Release Notes
Speech stack refactored into independent plugins
The legacy core speech system has been split into two built-in plugins — Kokoro TTS and Whisper STT — that can be enabled or toggled independently. Browser-native TTS remains available as a fallback when Kokoro is off, and the Whisper mic UI only appears when its plugin is enabled. Legacy speech settings and APIs have been removed in favor of engine-agnostic service brokers.
Timezone and time display preferences
A new user-configurable timezone and 12/24-hour clock preference flows through the scheduler, notifications, backups, memory timestamps, and all frontend time displays. UTC remains the internal boundary for absolute instants; user-facing dates render in the selected timezone.
Screenshot and capture privacy improvements
- Browser, Desktop, and computer-use screenshots are now ephemeral and context-scoped by default — routed through in-process image refs consumed by vision payloads instead of being written to disk.
- Explicit user-initiated screenshot paths remain durable.
Model preset handling
Deep-merging model preset slots with the active configuration now preserves custom context windows, rate limits, and nested kwargs across preset switches. Omitted utility and embedding slots inherit from the currently configured models.
Plugin system improvements
- Scanner false-positive reduction — scanner prompts are calibrated around demonstrated risk rather than the mere presence of common capabilities like network calls or filesystem access.
- Simplified activation toggle — the plugin list now uses a one-click ON/OFF switch instead of the previous dropdown.
- Configurable error retry count — the
_error_retryplugin reads its retry limit from settings instead of using a hardcoded single retry. - Skill visibility controls — users can hide skills from the model-facing catalog via the chat Skills selector; hidden skills are filtered from listing, search, recall, and prompt injection.
- Connector skill activation — a new
skills_activateendpoint lets connector clients activate skills in live chats.
Editor and document artifact changes
- Text Editor now owns Markdown saves, canvas-open intent, refresh, and stale-save protection.
- Office artifacts are renamed from
document_artifactand remain Desktop-only with Office formats. - File Browser routes Markdown files to Editor, txt/Office documents to Desktop, and browser-renderable files to Browser.
- Root-level Markdown files can be opened in Editor from the File Browser.
Surface and UI improvements
- Unified header action rail across Browser, Desktop, and Editor floating modals with consistent ordering and separators.
- Icon markers now render as Material Symbols in composer progress overlays.
- Browser screenshots open in the image viewer; live previews still open the Browser surface.
- Codex OAuth setup UI gains Main/Utility model selectors and account quota usage bars on the dashboard.
Browser runtime recovery
Clearer settings and recovery guidance when the host-browser runtime fails, directing users back to the internal Docker browser.
Fixes
- Fixed message queue persistence after auto-send.
- WhatsApp connector now includes the sender number in user messages.
- Updated Computer Use rearm guidance to reference the new
/computer-use onCLI access model.
Breaking changes
- Legacy speech settings and APIs removed. TTS and STT are now managed through the
_kokoro_ttsand_whisper_sttbuilt-in plugins. Existing speech configuration will not carry over automatically. document_artifactrenamed tooffice_artifact. Retired shims and facades have been removed; skills and integrations referencing the old name will need updating.
Breaking Changes
- Legacy speech settings and APIs removed; TTS/STT now managed via _kokoro_tts and _whisper_stt built-in plugins.
- `document_artifact` renamed to `office_artifact`; old name no longer accepted.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]