blank3rs/heso](https:

v0.2.0 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 6d CLI & Terminal

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Affected surfaces

breaking_upgrade

ReleasePort's take

Light signal

editorial:auto 6d

The heso CLI removes the plat registry and the `publish`, `pull`, and `list` verbs in version v0.2.0.

Why it matters: If you rely on the plat registry or those commands, update your workflows before upgrading to v0.2.0; affected surfaces are listed explicitly.

Summary

AI summary

Updates Release Notes, Install heso-cli 0.2.0, and Install heso-verify 0.2.0 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Breaking	High	Removes the plat registry, `publish`, `pull`, and `list` verbs. Removes the plat registry, `publish`, `pull`, and `list` verbs. Source: llm_adapter@2026-05-29 Confidence: low	—
Feature	Medium	`search` now queries Mojeek alongside DuckDuckGo and Wikipedia. `search` now queries Mojeek alongside DuckDuckGo and Wikipedia. Source: llm_adapter@2026-05-29 Confidence: high	—
Feature	Low	Adds optional SearXNG endpoint for `search` via `--searx-url`/`HESO_SEARX_URL`. Adds optional SearXNG endpoint for `search` via `--searx-url`/`HESO_SEARX_URL`. Source: granite4.1:30b@2026-05-29-audit Confidence: low	—
Deprecation	Medium	Deprecates the hosted store at heso.ca/ecosystem for plats. Deprecates the hosted store at heso.ca/ecosystem for plats. Source: granite4.1:30b@2026-05-29-audit Confidence: low	—

Full changelog

Release Notes

Removed

The plat registry. The publish, pull, and list verbs and the
heso registry namespace are gone, along with the hosted store at
heso.ca/ecosystem. Sharing a plat now means handing someone the
file (or a URL to it); they run heso run - or heso verify against
it. heso no longer publishes or hosts plats.

Changed

search now queries Mojeek alongside DuckDuckGo and the Wikipedia
knowledge block (plus an optional SearXNG endpoint via --searx-url
/ HESO_SEARX_URL), so results are returned more reliably when one
backend is unavailable. No API key is required.

heso-cli 0.2.0

Install heso-cli 0.2.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/blank3rs/heso/releases/download/v0.2.0/heso-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/blank3rs/heso/releases/download/v0.2.0/heso-cli-installer.ps1 | iex"

Download heso-cli 0.2.0

| File | Platform | Checksum |
|--------|----------|----------|
| heso-cli-aarch64-apple-darwin.tar.gz | Apple Silicon macOS | checksum |
| heso-cli-x86_64-apple-darwin.tar.gz | Intel macOS | checksum |
| heso-cli-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| heso-cli-aarch64-unknown-linux-gnu.tar.gz | ARM64 Linux | checksum |
| heso-cli-x86_64-unknown-linux-gnu.tar.gz | x64 Linux | checksum |

heso-verify 0.2.0

Install heso-verify 0.2.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/blank3rs/heso/releases/download/v0.2.0/heso-verify-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/blank3rs/heso/releases/download/v0.2.0/heso-verify-installer.ps1 | iex"

Download heso-verify 0.2.0

| File | Platform | Checksum |
|--------|----------|----------|
| heso-verify-aarch64-apple-darwin.tar.gz | Apple Silicon macOS | checksum |
| heso-verify-x86_64-apple-darwin.tar.gz | Intel macOS | checksum |
| heso-verify-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| heso-verify-aarch64-unknown-linux-gnu.tar.gz | ARM64 Linux | checksum |
| heso-verify-x86_64-unknown-linux-gnu.tar.gz | x64 Linux | checksum |

Breaking Changes

Removed the plat registry, `publish`, `pull`, and `list` verbs, the `heso registry` namespace, and the hosted store at heso.ca/ecosystem. Sharing a plat now requires handing the file (or URL) to another user.
Changed search behavior: added Mojeek as an additional backend alongside DuckDuckGo and Wikipedia; results are returned from any available backend without requiring an API key.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track blank3rs/heso](https:

Get notified when new releases ship.

About blank3rs/heso](https:

All releases →

Related context

Related tools

Earlier breaking changes

v0.3.0 `heso search` defaults to Mojeek, Brave, Marginalia, Wikipedia (plus SearXNG) instead of DuckDuckGo.
v0.1.8 `run` now verifies input platform integrity before replaying and exits on mismatch (exit 1).
v0.1.8 `read` no longer fetches external `<script src=...>` by default; opt‑in with `--js-fetch`.