Skip to content

Talon

v1.17.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-ai ai-agent anthropic autonomous-agents llm claude
+6 more
discord-bot mcp model-context-protocol self-hosted telegram-bot typescript

Affected surfaces

auth deps breaking_upgrade crypto_tls

Summary

AI summary

Updates 1.17.0, Bug Fixes, and 2026-06-12 across a mixed release.

Full changelog

1.17.0 (2026-06-12)

Features

  • agency: persistent goals, goal-driven heartbeat, adaptive effort routing (#315) (fba8f1c)
  • behaviour: promise-backing rule, heartbeat on by default, encourage proactive outreach (#318) (68d5c72)
  • metrics: aggregate token + cache usage in unified turn metrics (#303) (ca6f845)
  • native: C + C++ modules, shared wasm runtime, native registry (#319) (b84916b)
  • native: C sqlguard module — SQL LIKE / FTS5 escaping for model-controlled input (#323) (8201b82)
  • native: Gleam scheduler decision core — typed policy functions compiled to JS (#307) (e1c4acc)
  • native: Rust→WASM BLAKE3 hashing module — first brick of the data/indexing plane (#308) (300b869)
  • native: talon-driver — native launcher binary for apt/brew/source (#322) (8d12538)
  • native: Zig→WASM message-splitting core; pipe blake3 + Gleam scheduler into runtime (#312) (51005b8)
  • storage: migrate sessions, chat-settings, media-index to SQLite (#306) (066a0b5)
  • storage: SQLite data layer — FTS5 chat history, repository pattern, Node 24 (#305) (27cce68)
  • streaming BLAKE3 + due-driven heartbeat; Node-24 packaging alignment; auto release-please (#313) (3cdb9fd)
  • telegram: /doctor command — shared doctor core with native-module report (#317) (97f62e4)
  • triggers: Lua scripting language — WASM-sandboxed via wasmoon (#309) (12fd90f)

Bug Fixes

  • daemon: prevent duplicate daemons after /restart (#301) (aeba50f)
  • four correctness bugs — infinite retry loop, FTS corruption, LIKE injection, nested transaction crash (#310) (4cd2a01)
  • metrics: unify codex tool names, count failed MCP calls, fix count-histogram rendering (#298) (be22f3f)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Talon

Get notified when new releases ship.

Sign up free

About Talon

All releases →

Related context

Earlier breaking changes

  • v3.0.0 Removes the talon:// address scheme; use real paths instead.
  • v2.0.0 Removes vfs_list, vfs_read, vfs_write tools and GET /vfs/* routes; eliminates talon ls/cat CLI commands.

Beta — feedback welcome: [email protected]