This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
ReleasePort's take
Light signalReleasePort v2.6.9 fixes .env loading when working_dir is an environment variable and prevents recursive DAG run cleanup on Windows.
Why it matters: Apply this update immediately to avoid configuration load failures and unintended task terminations on Windows systems.
Summary
AI summaryFixed loading .env from env-based working_dir, avoiding recursive dag-run cleanup on old Windows.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Medium |
Go security group dependencies updated with 2 updates Go security group dependencies updated with 2 updates Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
UI security group dependencies updated with 2 updates UI security group dependencies updated with 2 updates Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
.env files load correctly when working_dir is environment variable .env files load correctly when working_dir is environment variable Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Recursive DAG run cleanup prevented on Windows systems Recursive DAG run cleanup prevented on Windows systems Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
LLM tool requests normalized for consistent handling LLM tool requests normalized for consistent handling Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Stale distributed sub-DAG leases repaired preventing task failures Stale distributed sub-DAG leases repaired preventing task failures Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
Changed
- chore(deps): bump the go-security group across 1 directory with 2 updates (#2138) @dependabot
- chore(deps): bump the ui-security group across 1 directory with 2 updates (#2139) @dependabot
Fixed
- fix: load .env from env-based working_dir (#2140) @yottahmd
- fix: avoid recursive dag-run cleanup on old windows (#2141) @yottahmd
- fix: normalize LLM tool requests (#2142) @yottahmd
- fix: repair stale distributed sub-dag leases (#2143) @yottahmd
Contributors
Thanks to our contributors for this release:
| Contribution | Contributor |
| --- | --- |
| bug: .env file isn't parsed when working_dir is an environment variable (#2135) | @Sky-Zeng (report) |
| 500 Server Error (#2137) | @zz111111 (report) |
| bug: distributed run lease expired: worker ... accepted the task claim but stopped reporting to the owner coordinator (#2136) | @pommetjehorlepiep (report) |
Full Changelog: https://github.com/dagucloud/dagu/compare/v2.6.8...v2.6.9
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About dagu
A local-first workflow engine built the way it should be: declarative, file-based, self-contained, air-gapped ready. One binary that scales from laptop to distributed cluster. Your Workflow Operator handles creating and debugging workflows.
Beta — feedback welcome: [email protected]