This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryFixed drawer auto‑open bug on /ui/tasks.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
add supply-chain and workflow security coverage add supply-chain and workflow security coverage Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Security | Medium |
add step-security/harden-runner audit step to all workflows add step-security/harden-runner audit step to all workflows Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Feature | Medium |
aggregator gate-job treats cancelled as failure aggregator gate-job treats cancelled as failure Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
self-PR autofix bot for contract-test drift (CI-E) self-PR autofix bot for contract-test drift (CI-E) Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
release flow switched to release-please with PR-gated changelog and tagging release flow switched to release-please with PR-gated changelog and tagging Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
gate-job conditional allowed-skips and JUnit flake summary gate-job conditional allowed-skips and JUnit flake summary Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
add web-UI screenshots to release notes and screens add web-UI screenshots to release notes and screens Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Performance | Medium |
narrow merge window, split PR/main concurrency and auto-heal allowlist narrow merge window, split PR/main concurrency and auto-heal allowlist Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Performance | Medium |
consolidate overlapping workflows (sonar, mutation testing, AI reviewers, publish stack) consolidate overlapping workflows (sonar, mutation testing, AI reviewers, publish stack) Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
drawer no longer auto-opens on /ui/tasks drawer no longer auto-opens on /ui/tasks Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
3 contract tests fixed after v2 UI cut 3 contract tests fixed after v2 UI cut Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
cancelled/timed_out alerts in CI silent-skip cancelled/timed_out alerts in CI silent-skip Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
mount gui-meta on root AND /api/v1 for bidirectional parity mount gui-meta on root AND /api/v1 for bidirectional parity Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
workflow hygiene pass 1: schedule wiring, permissions narrowing, version-comment alignment workflow hygiene pass 1: schedule wiring, permissions narrowing, version-comment alignment Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Other | Medium |
pre-commit config and Telegram fanout for nightly workflows pre-commit config and Telegram fanout for nightly workflows Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Other | Medium |
one-time operator playbook for free CI integrations one-time operator playbook for free CI integrations Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
Full changelog
What's Changed
- fix(gui): drawer no longer auto-opens on /ui/tasks by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1269
- docs(v2): add web-UI screenshots to release notes + screens by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1270
- fix(ci): unblock main — 3 contract tests broke after v2 UI cut (closes #1271) by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1272
- fix(gui): mount gui-meta on root AND /api/v1 — bidirectional parity by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1279
- feat(ci): aggregator gate-job — single required check that treats cancelled as failure (closes #1273 partial) by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1276
- fix(ci): kill silent-skip — cancelled/timed_out now alerts (closes #1273 partial) by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1274
- chore(ci): pre-commit config + Telegram fanout for nightly workflows by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1275
- ci: narrow merge window — split PR/main concurrency + auto-heal allowlist (#1273) by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1277
- feat(ci): self-PR autofix bot for contract-test drift (CI-E) by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1278
- docs(ci): one-time operator playbook for free CI integrations by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1283
- feat(ci): add supply-chain + workflow security coverage by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1284
- feat(ci): switch release flow to release-please (PR-gated changelog + tagging) by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1281
- ci: workflow hygiene pass 1 — schedule wiring, permissions narrowing, version-comment alignment by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1282
- feat(ci): gate-job conditional allowed-skips + JUnit flake summary by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1287
- ci: consolidate overlapping workflows (sonar, mutation testing, AI reviewers, publish stack) by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1286
- chore(ci): add step-security/harden-runner audit step to all workflows by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/1285
Full Changelog: https://github.com/sipyourdrink-ltd/bernstein/compare/v2.0.0...v2.0.1
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About chernistry/bernstein
Deterministic multi-agent orchestrator for 18 CLI coding agents (Claude Code, Codex, Cursor, Aider, Gemini CLI, OpenAI Agents SDK, and more). MCP server mode (stdio + HTTP/SSE) exposes the orchestrator to any MCP client. Git worktree isolation per agent, HMAC-chained audit trail, cost-aware model routing via contextual bandit. ~11K monthly PyPI downloads, Apache 2.0.
Related context
Related tools
Beta — feedback welcome: [email protected]