Skip to content

Hephaestus

v0.7.25 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

a2a agent agent-framework agent-os-desktop agent-skills agentic-ai
+13 more
agentic-workflow agentos agents agents-team agentshub ai-agents autonomous-agents llm llm-agents llm-tools mcp multi-agent-systems ochestration

Summary

AI summary

Updates v0.7.25 - 2026-06-25, scripts/verify-package.sh, and scripts/public_safety_check.sh across a mixed release.

Full changelog

v0.7.25 - 2026-06-25

  • Self-contained /hep-upload: Cloud and Hub uploads now use the bundled Hephaestus package/publish runtime instead of any private local checkout or external publish script.
  • Public upload gates moved into Hephaestus: marketplace upload validates publicProfile copy, routing-card/2.0 readiness, static security, bundle size limits, and server-compatible package hash before registration.
  • Routing-card hash repair: migrated cards now get agent_card_ref.content_hash and source.package_hash, and the bundled meta-agent card is routing_ready with benchmark fixtures.

Verification:

  • python3 -m pytest: 361 passed
  • scripts/verify-routing-cards.sh .: 4 cards routing_ready
  • scripts/verify-package.sh: PASS
  • scripts/public_safety_check.sh: PASS
  • scripts/verify-one-touch-install.sh: ALL PASS on v0.7.25

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Hephaestus

Get notified when new releases ship.

Sign up free

About Hephaestus

Open Agent OS for Claude Code, Codex, and Cursor with a meta-agent builder, A2A Hub routing, local ontology, and memory/security gates. Apache-2.0.

All releases →

Related context

Beta — feedback welcome: [email protected]