Skip to content

Plannotator

v0.6.7 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agents claude-code code-review codex obsidian opencode
+3 more
pi-mono plan-mode skills

Summary

AI summary

Updates What's New in v0.6.7, fix, and https://github.com/Yair-Ziv across a mixed release.

Full changelog

Follow @plannotator on X for updates


Missed recent releases?

| Release | Highlights |
|---------|------------|
| v0.6.6 | OpenCode sub-agent fix, CVE-2026-22812 security update |
| v0.6.5 | Cmd+C shortcut, newline preservation, hook timeout fix |
| v0.6.4 | Cmd+Enter keyboard shortcut |
| v0.6.3 | OpenCode npm package fix, cache path fix |
| v0.6.2 | OpenCode title generation fix, WSL browser detection |
| v0.6.1 | Obsidian custom paths, disable sharing config |
| v0.6.0 | Permission mode support, inline annotation editing |


What's New in v0.6.7

Quick Comment Mode

A faster way to add comments. Two new features for quick annotation:

  1. Comment Mode - New editor mode where selecting text immediately shows the comment input (no toolbar menu)
  2. Type-to-Comment - In Selection mode, just start typing after selecting text to create a comment

https://github.com/user-attachments/assets/c5741211-402e-4958-ae9e-4370f2a07fd4

OpenCode: Smart Agent Detection

The agent switcher now queries OpenCode for available agents instead of using a hardcoded list:

  • Shows warning banner when saved agent doesn't exist in your OpenCode config
  • Dynamic dropdown populated with your actual agents
  • Fallback to hardcoded options when API unavailable

OpenCode: Primary Tools Fix

Improved sub-agent blocking using OpenCode's native mechanism:

  • Uses experimental.primary_tools config (the intended approach)
  • Properly hides submit_plan from ALL sub-agents (including custom ones)
  • Fixes v0.6.6 message persistence bug

Thanks to @metaphorics for the detailed analysis (#86), and tarquin_dan and spoons.420 from Discord for testing and feedback.


Install / Update

macOS / Linux:

curl -fsSL https://plannotator.ai/install.sh | bash

Windows:

irm https://plannotator.ai/install.ps1 | iex

Claude Code Plugin: Run /plugin in Claude Code, find plannotator, and click "Update now".

OpenCode: Clear cache and restart:

rm -rf ~/.bun/install/cache/@plannotator

Then in opencode.json:

{
  "plugin": ["@plannotator/opencode@latest"]
}

What's Changed

  • fix: use primary_tools config for sub-agent blocking by @backnotprop in https://github.com/backnotprop/plannotator/pull/95
  • fix: smart detection for agent switching in OpenCode by @backnotprop in https://github.com/backnotprop/plannotator/pull/96
  • feat: add Comment mode and type-to-comment shortcut by @backnotprop in https://github.com/backnotprop/plannotator/pull/97

Full Changelog: https://github.com/backnotprop/plannotator/compare/v0.6.6...v0.6.7

Security Fixes

  • CVE-2026-22812

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Plannotator

Get notified when new releases ship.

Sign up free

About Plannotator

All releases →

Related context

Beta — feedback welcome: [email protected]