This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+11 more
ReleasePort's take
Moderate signalSentry events will now scrub file paths, PII, and secrets before transmission.
Why it matters: Reduces risk of data leakage in error reports; applies to all Sentry‑integrated surfaces. (Severity 90)
Summary
AI summaryiOS UI overhaul, CodeRabbit workflow change, Sentry data scrubbing, cmux CLI additions, and extensive CI/performance fixes.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Scrub file paths, PII, and secrets from Sentry events before sending. Scrub file paths, PII, and secrets from Sentry events before sending. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Breaking | High |
Stop blocking merges in CodeRabbit (request_changes_workflow=false). Stop blocking merges in CodeRabbit (request_changes_workflow=false). Source: llm_adapter@2026-06-12 Confidence: low |
— |
| Feature | Medium |
Add fish shell integration. Add fish shell integration. Source: llm_adapter@2026-06-12 Confidence: low |
— |
| Feature | Medium |
Add `cmux window display` command to place a window on a named display. Add `cmux window display` command to place a window on a named display. Source: llm_adapter@2026-06-12 Confidence: low |
— |
| Performance | Medium |
Drop redundant disk I/O on browser‑availability checks and background logging. Drop redundant disk I/O on browser‑availability checks and background logging. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fix SSH PTY typing lag. Fix SSH PTY typing lag. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fix UI freeze when closing tabs caused by synchronous agent‑index load on the main thread. Fix UI freeze when closing tabs caused by synchronous agent‑index load on the main thread. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fix launch crash on macOS 27 caused by zero‑size SF Symbol rasterization. Fix launch crash on macOS 27 caused by zero‑size SF Symbol rasterization. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fix updater error copy for wedged‑launchd install failures and add a manual‑download fallback. Fix updater error copy for wedged‑launchd install failures and add a manual‑download fallback. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fix sidebar Shift‑click range anchor after a no‑op drag. Fix sidebar Shift‑click range anchor after a no‑op drag. Source: llm_adapter@2026-06-12 Confidence: low |
— |
Full changelog
What's Changed
- Pair onboarding: drop leading row icons, keep text by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5520
- Fix React script warning in web layout by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5525
- CodeRabbit: stop blocking merges (request_changes_workflow=false) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5538
- Match iOS viewport border to pane divider color by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5530
- iOS: redesign default terminal toolbar layout by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5532
- iOS: rename and pin workspaces from the phone by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5512
- iOS: multi-Mac host switcher by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5513
- Add React and Solid agent session panels by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/4429
- iOS: data-driven terminal toolbar with custom actions + customize button by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5510
- iOS: re-implement still-needed terminal/notification fixes from #5259 by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5519
- Extract control-socket wire DTOs into CmuxControlSocket (stage 3a) by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5483
- iOS: paste images into the terminal from the phone clipboard by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5546
- Mac pairing window: show connected state when iPhone attaches by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5542
- iOS: show Restoring session for a known paired Mac on launch by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5543
- iOS: non-blocking PostHog product analytics (Phase A) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5567
- iOS: DEBUG dogfood feedback round-trip + structured diagnostic log (P1) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5574
- macOS: DEBUG auto-sign-in for tagged DEV builds (dogfood account) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5582
- Turnkey dev builds P2: phone auto-pair + unified dev-setup entrypoint by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5584
- Turnkey dev builds P3: /dev-cli environment profiles (composer/notif/browser/groups/...) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5585
- iOS: drop Mac host name from workspace titles + add wrap-titles toggle by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5544
- iOS: tellable incrementing version (1.0.x + dev tag/SHA) instead of frozen 1.0 by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5592
- iOS: reorderable built-in toolbar items (Ctrl/Option/Cmd/Esc/Tab) in toolbar settings by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5579
- iOS: cap restoring-session window so a stale stored Mac can't hang it by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5564
- iOS: show workspaces from all Mac windows, not just the front one by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5565
- Keep pinned workspaces inside groups by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5541
- Fix sidebar Shift-click range anchor after no-op drag by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5601
- Fix SSH PTY typing lag by @lleewwiiss in https://github.com/manaflow-ai/cmux/pull/5594
- [codex] Move cmux agent policies into skills by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5608
- Split webviews bundle by surface (code splitting) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5613
- Fix inline VS Code command palette and WebSocket startup by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5595
- Fix diff viewer loading state showing gray instead of the terminal theme by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5631
- Keep Codex permission hooks non-blocking by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5507
- Sentry: scrub file paths / PII / secrets from events before send (beforeSend/beforeBreadcrumb) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5598
- iOS: make terminal picker a native Menu (tap + press-drag-release) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5618
- Device registry P1: auto-pair the phone on reload by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5626
- Fix publishV2 JSON response retention by @austinywang in https://github.com/manaflow-ai/cmux/pull/5664
- Fix UI freeze when closing tabs (synchronous agent-index load on main) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5669
- Retry Ghostty helper artifact uploads by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5675
- Deflake UI test app launch waits by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/4461
- Event-driven SharedLiveAgentIndex: kill reload churn + close-undo staleness by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5673
- Review-bot rules: prevent sync expensive-load + cache-substitution regressions by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5672
- CI: re-enable Swift file length budget gate by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5681
- Re-enable FileExplorerStore XCTest in CI by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5682
- Run all DB-gated web tests in CI by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5683
- Run Swift package settings alias test in CI by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5684
- Retry required release asset attestations by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5686
- Add fish shell integration by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5678
- Deflake iOS menu item UI test taps by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5687
- Remove stale iOS pairing QR asset by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5692
- ios: add --external flag to upload-testflight.sh for external TestFlight groups by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5552
- Fix nightly Xcode selection on single-Xcode runners by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5694
- Fail bundled CLI tests when helper is missing by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5696
- Isolate tmux corpus terminal CI DerivedData by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5697
- Deflake browser find UI test launch readiness by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5699
- [codex] Add more cmux agent skills by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5614
- Remove sidebar row-ids preference aggregation feeding the layout livelock (#2586) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5708
- Cover shell startup matrix by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5695
- Fix #5286: surface needs-input attention for feed-routed blocking decisions by @austinywang in https://github.com/manaflow-ai/cmux/pull/5313
- Fix: make Select Workspace 1…9 / Surface 1…9 shortcuts actually rebindable (#5189) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5196
- Fix tagged native auth callback handoff by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5742
- Preserve user Claude settings on resume by @austinywang in https://github.com/manaflow-ai/cmux/pull/5661
- Fix sidebar status pills for newly created workspaces by @austinywang in https://github.com/manaflow-ai/cmux/pull/5662
- Serialize Ghostty surface registry mutations by @austinywang in https://github.com/manaflow-ai/cmux/pull/5622
- iroh default mobile transport: design + green Swift FFI spike by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5735
- iOS: turnkey cloud TestFlight lane (fleet unsigned archive + local re-sign/verify) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5729
- Fix dragging grouped workspaces above their group by @austinywang in https://github.com/manaflow-ai/cmux/pull/5612
- Track AgentLaunchSanitizer.swift in the Swift file-length budget by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5751
- perf: drop redundant disk I/O on browser-availability checks and bg logging by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5744
- Fix sidebar scrollbar: hide when content fits, fade overlay knob when idle (#3241) by @austinywang in https://github.com/manaflow-ai/cmux/pull/4767
- Fix launch crash on macOS 27 from zero-size SF Symbol rasterization by @matheustimbo in https://github.com/manaflow-ai/cmux/pull/5670
- docs: surface Workspace Groups on cmux.com/docs by @austinywang in https://github.com/manaflow-ai/cmux/pull/5749
- Fix #5128: open links on Cmd-click inside alt-screen TUIs (Claude/Codex) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5406
- Resolve resumed claude through the cmux wrapper shim env var (fixes #5639) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5721
- Fix #5733: drive find-overlay key routing off slot view hierarchy, not per-keystroke Entry weak-copy scan by @austinywang in https://github.com/manaflow-ai/cmux/pull/5755
- ios: detect Tailscale-off on the phone and surface it on pairing and disconnected screens by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5722
- iOS: remove TestFlight wording from iOS screens + consistent no-devices chrome by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5593
- iOS pairing: surface distinct, actionable failures instead of a silent ~60s spinner by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5713
- macOS pairing window: replace "Download via TestFlight" with "Get cmux for iPhone" by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5795
- iOS sign-in: bound every phase, cancellable OAuth waits, Cancel escape hatch by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5728
- Slim the pairing QR: compact attach payload, drop vestigial auth_token, ECC M to L by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5727
- iOS: pull-to-refresh on the workspace list by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5654
- iOS: first-run onboarding before pairing by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5655
- Retain Settings window for reliable reopen by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5801
- Stop titlebar elements from shifting when toggling the sidebar by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5707
- iOS onboarding: no-Tailscale guidance and explicit setup dead-ends by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5714
- CmuxControlSocket stage 3b: main-actor lifecycle, AsyncStream client hand-off by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5719
- Add
cmux window displayto place a window on a named display by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5804 - chore: refresh the Swift file-length budget for current main by @austinywang in https://github.com/manaflow-ai/cmux/pull/5784
- Fix updater error copy for wedged-launchd install failures, add manual-download fallback by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5760
- chore: pre-allocate FeedCoordinator.swift budget for #5651 by @austinywang in https://github.com/manaflow-ai/cmux/pull/5814
- iOS: hierarchical device tree (device → tags → workspaces) over the device registry by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5648
- iOS: mobile browser panes P1 (WKWebView surface) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5652
- Fix OSC 8 Cmd-click hyperlinks in terminal panes by @austinywang in https://github.com/manaflow-ai/cmux/pull/3580
- Don't hijack ZDOTDIR when the bundled shell-integration bootstrap is missing by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5773
- iOS: Release-safe Send Feedback (privileged direct-to-agent for @manaflow.ai on tailnet, else email) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5653
- Deflake control-socket ping UI tests: wait for listener bind, then ping by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5812
- Localize package display strings missing from app catalogs by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5829
- Fix light themes rendering white-on-white terminals (#3459) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5826
- Cache negative cmux-scope results so system.top stops re-probing every process per poll by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5759
- web: bypass next/image optimizer for hero logo (Safari broken-image fix) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5820
- Stop SSH auto-reconnect when host is unreachable; add manual Reconnect control (#5734) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5767
- Custom sidebars: project PR context from per-panel state, not the focused-panel mirror by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5823
- Add cmux-custom-sidebar agent skill by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5851
- cli: browser view actions (react-grab, devtools, console, focus-mode, zoom, history) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5766
- Add a synchronous read seam to JSONConfigStore by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5838
- Add workspace group commands to the cloud CLI relay by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5856
- Add a persistent default display for dev builds by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5828
- Custom sidebar: instant toggle remount and live resize repaint by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5864
- browser actions: honor beforeinput on contenteditable, guard focus-mode side-effect, scope --return-to by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5870
- Diff viewer: review comments with per-repo persistence and TextBox attach by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5768
- sidebar perf: decouple workspace sidebar from notification-store churn by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5859
- Set FD_CLOEXEC on control-socket descriptors by @austinywang in https://github.com/manaflow-ai/cmux/pull/5837
- Pixel-align sidebar content height to hide the phantom scrollbar (#3241) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5846
- Cap sidebar status/metadata dictionaries to bound the sidebar view-graph livelock (#5845) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5855
- Revert "Cap sidebar status/metadata dictionaries to bound the sidebar view-graph livelock (#5845)" by @austinywang in https://github.com/manaflow-ai/cmux/pull/5884
- Revert PR 5767 remote reconnect suspension by @austinywang in https://github.com/manaflow-ai/cmux/pull/5882
- Revert "Revert PR 5767 remote reconnect suspension" by @austinywang in https://github.com/manaflow-ai/cmux/pull/5885
- iOS: iMessage-style terminal composer (open by default, inline send, per-terminal drafts) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5876
- Fix browser keyDown stack overflow reentry by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5899
- Add vibe-coded custom sidebar examples by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5895
- Guard performKeyEquivalent keyDown force-dispatches against replay loops by @austinywang in https://github.com/manaflow-ai/cmux/pull/5891
- CmuxLiveEval: live-eval state engine foundation for vibe-coded sidebars by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5866
- Browser CLI reliability: socket-worker JS lane, CSP eval fallback, blank-surface fixes, fixture test suite by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5778
- Fix iOS CI false-green: align manual-pairing tests with encrypted-route restriction, catch Swift Testing failures in success override by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5906
- Custom sidebars: in-process renderer by default, Settings section, worker resize pump fix by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5867
- Forward notifications to iPhone only when away from the Mac by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5912
- Minimal pairing QR: routes-only payload, loopback refusal, full-width render, Copy IP/Port, no expiry by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5872
- Fix browser context menu opening the wrong link by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5780
- Fix forked Claude sessions restoring the parent session after cmux restart by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5910
- iOS render-grid liveness watchdog: probe before teardown, consume during subscribe ack (fixes the 10.5s false-fire replay loop) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5869
- CmuxControlSocket stage 3c: extract the RPC dispatch half of TerminalController into ControlCommandCoordinator (14 domains) by @azooz2003-bit in https://github.com/manaflow-ai/cmux/pull/5816
- iOS: park notification-tap deep links until the workspace can be navigated to by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5927
- Add New Browser Workspace action (Option+Cmd+N) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5926
- Fix browser image download filenames by @austinywang in https://github.com/manaflow-ai/cmux/pull/5938
- iOS: View as Text sheet for terminal copy-paste by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5875
- Stabilize browser navigation UI test socket launch by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5950
- Re-assert sidebar overlay scrollers when the preferred scroller style changes (#3241 sidebar scope) by @austinywang in https://github.com/manaflow-ai/cmux/pull/5955
- Fix Find pane for same-directory workspaces by @austinywang in https://github.com/manaflow-ai/cmux/pull/5956
- Browser pane: bypass system proxy for loopback on local workspaces by @austinywang in https://github.com/manaflow-ai/cmux/pull/5915
- Fix hidden right-sidebar FileExplorer mount loop on launch by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/4937
- browser inputs: dispatch pointerenter non-bubbling to match mouseenter and spec by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5958
- Fix FileExplorer updateNSView re-entrant SwiftUI loop on macOS 26 (#4931) by @kevinsslin in https://github.com/manaflow-ai/cmux/pull/5786
- Distrust cross-agent and shell-wrapper agent launch captures (fixes missing/broken Fork Conversation) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5937
- Session restore stress: recover from corrupt snapshot via -previous backup by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/5914
- Release v0.64.15 by @austinywang in https://github.com/manaflow-ai/cmux/pull/5968
New Contributors
- @lleewwiiss made their first contribution in https://github.com/manaflow-ai/cmux/pull/5594
- @matheustimbo made their first contribution in https://github.com/manaflow-ai/cmux/pull/5670
- @kevinsslin made their first contribution in https://github.com/manaflow-ai/cmux/pull/5786
Full Changelog: https://github.com/manaflow-ai/cmux/compare/v0.64.14...v0.64.15
Security Fixes
- Sentry: scrub file paths / PII / secrets from events before send (beforeSend/beforeBreadcrumb)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About cmux
Ghostty-based macOS terminal with vertical tabs and notifications for AI coding agents
Beta — feedback welcome: [email protected]