Skip to content

agent-zero

v2.4 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent ai assistant autonomous linux zero

ReleasePort's take

Light signal
editorial:auto 11d

Crash‑safe chat persistence writes to a temporary file, fsyncs, and atomically swaps data on completion.

Why it matters: Prevents data corruption during interrupted saves; critical for reliable user experience in messaging apps.

Summary

AI summary

Crash‑safe chat persistence prevents data corruption during interrupted saves.

Changes in this release

Feature Medium

Crash-safe chat persistence writes to a temp file, fsyncs, and atomically swaps data.

Crash-safe chat persistence writes to a temp file, fsyncs, and atomically swaps data.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Circuit breaker limits consecutive malformed or repeated model outputs to prevent infinite loops.

Circuit breaker limits consecutive malformed or repeated model outputs to prevent infinite loops.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Gemini CLI is now a registered orchestrator backend with auth detection and headless workflow support.

Gemini CLI is now a registered orchestrator backend with auth detection and headless workflow support.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

NVIDIA NIM provider available for chat and embedding models via LiteLLM with hosted discovery and API key config.

NVIDIA NIM provider available for chat and embedding models via LiteLLM with hosted discovery and API key config.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Responsive interface settings provide independent mobile/desktop toggles for project selector, clock, connection status, and right canvas rail.

Responsive interface settings provide independent mobile/desktop toggles for project selector, clock, connection status, and right canvas rail.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Multiline terminal input is executed as a single compound command in Bash and PowerShell, preventing premature prompt completion.

Multiline terminal input is executed as a single compound command in Bash and PowerShell, preventing premature prompt completion.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Built-in slash commands are listed separately; editing creates a project or global override instead of modifying built‑ins, and redundant UI elements were removed.

Built-in slash commands are listed separately; editing creates a project or global override instead of modifying built‑ins, and redundant UI elements were removed.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Codex CLI refresh occurs after self‑update without making npm failures fatal.

Codex CLI refresh occurs after self‑update without making npm failures fatal.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Gemini CLI container setup separates installation and probing; API key resolution uses Agent Zero secret aliases instead of environment variables.

Gemini CLI container setup separates installation and probing; API key resolution uses Agent Zero secret aliases instead of environment variables.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Self‑update health‑check timeout increased from 2 to 3 minutes for slower Docker/virtiofs environments.

Self‑update health‑check timeout increased from 2 to 3 minutes for slower Docker/virtiofs environments.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Low

OAuth model selection UI simplified; provider cards, model pickers aligned, and sole provider inference guarded against silent replacement.

OAuth model selection UI simplified; provider cards, model pickers aligned, and sole provider inference guarded against silent replacement.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

Feature Low

Default utility model updated: global default, Balance preset, and onboarding now use `google/gemini-3.1-flash-lite` on OpenRouter without preview suffix.

Default utility model updated: global default, Balance preset, and onboarding now use `google/gemini-3.1-flash-lite` on OpenRouter without preview suffix.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

Bugfix Medium

Preset editor rows now carry stable keys, preventing rebinding issues after deletion.

Preset editor rows now carry stable keys, preventing rebinding issues after deletion.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

Bugfix Medium

Provider‑specific kwargs and custom API base reset when switching model providers to avoid stale options leakage.

Provider‑specific kwargs and custom API base reset when switching model providers to avoid stale options leakage.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

Refactor Low

Preset editor refactored into an Alpine store for managing drafts and actions declaratively.

Preset editor refactored into an Alpine store for managing drafts and actions declaratively.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

Full changelog

Release Notes

  • Crash-safe chat persistence — Serialized chats are now written to a temporary file, fsynced, and atomically swapped into place, so an interrupted save never corrupts existing chat data.

  • Circuit breaker for runaway response loops — A configurable limit on consecutive malformed or repeated model outputs prevents infinite loops. The threshold is exposed in Agent Settings and a clear stop notice is shown when triggered.

  • Gemini CLI support in Orchestrator — Gemini CLI is now a registered orchestrator backend with auth detection, headless workflow support, and exposed settings and status metadata.

  • NVIDIA NIM provider — NVIDIA NIM is available for chat and embedding models via LiteLLM, with hosted model discovery, onboarding integration, and API key configuration.

  • Responsive interface control visibility — A new Interface settings section provides independent mobile and desktop toggles for the project selector, clock, connection status, and right canvas rail, persisted per instance.

  • Multiline terminal command grouping — Multiline terminal input is now executed as a single compound command in the current shell, preventing intermediate prompts from completing queued lines early. Bash and PowerShell are both supported.

  • Improved built-in command management — Bundled slash commands are listed in their own section; editing one creates a same-name project or global override rather than modifying the built-in. The Commands sidebar shortcut and redundant UI elements have been removed.

  • Codex CLI refreshed during self-update — An existing Codex CLI installation is refreshed after a successful or already-current self-update without making npm failures fatal.

  • Hardened Gemini CLI container setup — Gemini CLI installation and probing are now separated for better observability, and API key resolution uses Agent Zero secret aliases instead of assuming exported environment variables.

  • Preset editor stability after deletion — Each preset editor row now carries a stable key so removing a middle row no longer causes Alpine to rebind nested model state to the wrong preset.

  • Preset editor refactored into Alpine store — Preset drafts and add/remove/save actions are managed through a dedicated Alpine store, keeping the HTML declarative.

  • OAuth model selection polish — Provider cards and model-slot copy are simplified, model pickers align with the main configuration UI, and a sole connected OAuth provider is only inferred when it would not silently replace a different saved provider.

  • Clear provider-specific kwargs on provider change — Additional parameters and custom API base are now reset when switching model providers, preventing stale options from leaking across providers.

  • Extended self-update health timeout — The default update and rollback health-check window is raised from two to three minutes to accommodate slower Docker and virtiofs environments.

  • Updated default utility model — The global default, Balance preset, and onboarding defaults now use google/gemini-3.1-flash-lite on OpenRouter without the preview suffix.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track agent-zero

Get notified when new releases ship.

Sign up free

About agent-zero

Agent Zero AI framework

All releases →

Related context

Earlier breaking changes

  • v2.5 Legacy filesystem logs in /a0/logs are deleted on startup.
  • v2.5 Launcher host access controls removed from Core WebUI.
  • v2.5 Model presets become global; project-scoped definitions removed.
  • v1.16 Legacy speech settings and APIs removed; use _kokoro_tts and _whisper_stt plugins instead.
  • v1.14 Multi-action tools standardized around tool_args.action with backward compatibility

Beta — feedback welcome: [email protected]