Skip to content

chernistry/bernstein

v2.9.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 26d AI Agents & Assistants
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agent-orchestrator agentic-ai ai-agents aider air-gap audit-trail
+14 more
claude-code cli-tool codex-cli coding-agent deterministic-replay deterministic-scheduler hmac-audit mcp-server model-context-protocol multi-agent parallel-worktrees provenance python reproducibility

Affected surfaces

deps

Summary

AI summary

Updates v2.9.0 Released 2026-06-30, Quality, and 3.15.0 across a mixed release.

Full changelog

v2.9.0

Released 2026-06-30.

Features

  • The GitHub Copilot CLI adapter now runs in non-interactive print mode (copilot -p ... -s --allow-all-tools --no-ask-user) so a scheduled run never blocks on a permission or clarifying prompt, and it maps Claude cascade tier names that reach the adapter to Copilot's auto router instead of passing a model id Copilot rejects. Includes adapter contract coverage and tests. (#2128)

Security

  • Bumped js-yaml in the VS Code extension lockfile to a patched release (3.15.0) to clear the merge-key quadratic-complexity DoS advisory (Dependabot #74).

Quality

  • Resolved the open refurb FURB173 finding in the worktrees unlock command (dict union operator). (#2140)

Security Fixes

  • dep: Bumped js-yaml in VS Code extension lockfile to 3.15.0 to clear merge‑key quadratic‑complexity DoS advisory (Dependabot #74).
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track chernistry/bernstein

Get notified when new releases ship.

Sign up free

About chernistry/bernstein

Deterministic multi-agent orchestrator for 18 CLI coding agents (Claude Code, Codex, Cursor, Aider, Gemini CLI, OpenAI Agents SDK, and more). MCP server mode (stdio + HTTP/SSE) exposes the orchestrator to any MCP client. Git worktree isolation per agent, HMAC-chained audit trail, cost-aware model routing via contextual bandit. ~11K monthly PyPI downloads, Apache 2.0.

All releases →

Related context

Earlier breaking changes

  • v3.7.1 `bernstein approve` and `bernstein reject` now enforce identifier regex `[A-Za-z0-9._-]{1,64}`.
  • v3.7.1 Tampered mission ledger reports as unverified rather than not-found.
  • v3.7.1 `mission define` now refuses phases without gate tasks.
  • v3.5.0 MCP client, transport, and gateway become stateless; calls carry content‑derived trace IDs in _meta.

Beta — feedback welcome: [email protected]