This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryMinor fixes and improvements.
Full changelog
What's Changed
- ci(publish): allow re-running a release publish via workflow_dispatch by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/2107
- Update astral-sh/setup-uv action to v8.2.0 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2103
- chore(deps): update zizmorcore/zizmor-action action to v0.5.7 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2102
- chore(deps): update dependency @types/node to v24.13.2 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2105
- chore(deps): update dependency @tanstack/react-query to v5.101.1 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2104
- chore(deps): update react monorepo to v19.2.17 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2100
- chore(deps): update dependency @vscode/vsce to v3.9.2 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2091
- chore(deps): update dependency autoprefixer to v10.5.2 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2092
- Update trufflesecurity/trufflehog action to v3.95.6 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2101
- Update dependency tailwindcss to v4.3.1 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2098
- Update radix-ui-primitives monorepo by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2099
- Update gcr.io/oss-fuzz-base/base-builder-python Docker digest to 3b846e1 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2108
- Update actions/attest-build-provenance action to v4.1.1 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2109
- Update dependency @types/vscode to v1.125.0 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2111
- Update dependency astral-sh/uv to v0.11.25 by @renovate[bot] in https://github.com/sipyourdrink-ltd/bernstein/pull/2110
- chore(release): 2.8.2 by @chernistry in https://github.com/sipyourdrink-ltd/bernstein/pull/2112
Full Changelog: https://github.com/sipyourdrink-ltd/bernstein/compare/v2.8.1...v2.8.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About chernistry/bernstein
Deterministic multi-agent orchestrator for 18 CLI coding agents (Claude Code, Codex, Cursor, Aider, Gemini CLI, OpenAI Agents SDK, and more). MCP server mode (stdio + HTTP/SSE) exposes the orchestrator to any MCP client. Git worktree isolation per agent, HMAC-chained audit trail, cost-aware model routing via contextual bandit. ~11K monthly PyPI downloads, Apache 2.0.
Related context
Related tools
Earlier breaking changes
- v3.7.1 `bernstein approve` and `bernstein reject` now enforce identifier regex `[A-Za-z0-9._-]{1,64}`.
- v3.7.1 Tampered mission ledger reports as unverified rather than not-found.
- v3.7.1 `mission define` now refuses phases without gate tasks.
- v3.5.0 MCP client, transport, and gateway become stateless; calls carry content‑derived trace IDs in _meta.
Beta — feedback welcome: [email protected]