This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryBroad release touches v0.5.0 Changes since v0.4.4:, agent, actions, and tui.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds docker.compose_config action to render merged compose configuration. Adds docker.compose_config action to render merged compose configuration. Source: llm_adapter@2026-06-08 Confidence: high |
— |
| Feature | Low |
Adds docker.compose_logs action to tail all stack services in one shot. Adds docker.compose_logs action to tail all stack services in one shot. Source: llm_adapter@2026-06-08 Confidence: high |
— |
| Feature | Low |
Adds deterministic discovery plan builder and analyze orchestrator in agent. Adds deterministic discovery plan builder and analyze orchestrator in agent. Source: llm_adapter@2026-06-08 Confidence: high |
— |
| Feature | Low |
Adds one follow‑up round by default to enable discover‑then‑act chaining in agent. Adds one follow‑up round by default to enable discover‑then‑act chaining in agent. Source: llm_adapter@2026-06-08 Confidence: high |
— |
| Feature | Low |
Adds prefix env matching for analyze routing (e.g., singularity -> singularityhive). Adds prefix env matching for analyze routing (e.g., singularity -> singularityhive). Source: llm_adapter@2026-06-08 Confidence: high |
— |
| Feature | Low |
Adds proposer chaining of docker.compose_logs after compose discovery in agent. Adds proposer chaining of docker.compose_logs after compose discovery in agent. Source: llm_adapter@2026-06-08 Confidence: high |
— |
| Feature | Low |
Adds SSH keepalive support to prevent idle disconnects (ServerAlive). Adds SSH keepalive support to prevent idle disconnects (ServerAlive). Source: llm_adapter@2026-06-08 Confidence: low |
— |
| Feature | Low |
Add SSH keepalive (ServerAlive) to exec module. Add SSH keepalive (ServerAlive) to exec module. Source: granite4.1:30b@2026-06-08-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes container hostname alignment with documentation (app-host-01). Fixes container hostname alignment with documentation (app-host-01). Source: llm_adapter@2026-06-08 Confidence: high |
— |
| Bugfix | Medium |
Rejects mid‑path .. segments in compose project_dir to block path traversal. Rejects mid‑path .. segments in compose project_dir to block path traversal. Source: llm_adapter@2026-06-08 Confidence: high |
— |
| Bugfix | Medium |
Requires absolute project_dir on compose actions to block .. traversal. Requires absolute project_dir on compose actions to block .. traversal. Source: llm_adapter@2026-06-08 Confidence: high |
— |
Full changelog
v0.5.0
Changes since v0.4.4:
- docs(demo): reactive-sudo restart take — fixture, recording script, README embed (99d76eb)
- fix(demo): align container hostname with docs (app-host-01) (492198f)
- feat(tui): add annex + skill to SlashCommand union (79b8461)
- feat(tui): parse /annex and /skill commands (095f252)
- refactor(agent): extract ingestReportDoc, parameterize RAG kind/source (f7df607)
- feat(tui): wire /annex — file the session as a solved-case in RAG (78f5416)
- feat(skills): Skill type + frontmatter schema (969889a)
- feat(skills): markdown loader with catalog validation (776d0b4)
- feat(skills): built-in default baseline skill (acd79bd)
- feat(tui): /skill lists stock + user skills (7f85942)
- feat(actions): docker.compose_ls — discover compose projects (09fe492)
- feat(actions): discover.compose_files — find compose files on disk (de865b5)
- feat(actions): register docker.compose_ls + discover.compose_files (feb8b2a)
- fix(actions): mark unused args param in discover.compose_files (TS6133) (9030c17)
- feat(agent): deterministic discovery plan builder (584e042)
- feat(agent): runAnalyze orchestrator — deterministic discovery to grounded baseline (aea23cc)
- feat(agent): deterministic analyze-intent routing (IT/EN verbs + env resolve) (e986c29)
- feat(tui): route analyze intent to the deterministic orchestrator (8d1cef8)
- test(skills): cover loadSkillsFromDir contracts (missing dir, failures, mutate rejection) (4ad71d8)
- feat(exec): SSH keepalives (ServerAlive) — prevent idle-disconnect, detect dead peers (f1d6cec)
- feat(actions): docker.compose_config — render merged compose (depends_on, healthchecks) (9838442)
- fix(actions): require absolute project_dir on compose actions (block .. traversal) (6f047a9)
- feat(actions): docker.compose_logs — tail all stack services in one shot (0b291cd)
- feat(agent): planner reaches for a logs action on explicit log requests (07dfecd)
- fix(actions): reject mid-path .. segments in compose project_dir (complete traversal block) (3262e36)
- feat(agent): one follow-up round by default (enables discover-then-act chaining) (60447ea)
- feat(agent): prefix env matching in analyze routing (singularity -> singularityhive) (23b8cde)
- feat(agent): proposer chains docker.compose_logs after compose discovery (c459428)
- chore(release): 0.5.0 — Smart Analyze + Skills foundation + diagnostics & hardening (26750b9)
Install
# macOS (Apple Silicon)
curl -fsSLO https://github.com/antoniociccia/piper/releases/download/v0.5.0/piper-darwin-arm64
chmod +x piper-darwin-arm64 && mv piper-darwin-arm64 /usr/local/bin/piper
# Linux x64
curl -fsSLO https://github.com/antoniociccia/piper/releases/download/v0.5.0/piper-linux-x64
chmod +x piper-linux-x64 && sudo mv piper-linux-x64 /usr/local/bin/piper
Verify the download against the matching .sha256 published alongside each binary.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About antoniociccia/piper
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]