Circus Chief

v1.12.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 9d AI Agents & Assistants

✓ No known CVEs patched

This release patches 1 known CVE

Topics

agentic-ai agentic-workflow agents ai-agents claude claude-code

+5 more

codex coding-agents developer-tools gemini-cli worktrees

Summary

AI summary

Fixes child session git worktree creation and hardens package publish artifacts.

Type	Severity	Summary	CVE
Security	High	Harden package publish artifacts. Harden package publish artifacts. Source: llm_adapter@2026-06-06 Confidence: high	—
Feature
Feature	Low	Add enable/disable toggle for built-in providers. Add enable/disable toggle for built-in providers. Source: llm_adapter@2026-06-06 Confidence: high	—
Feature	Low	Show active spinner on chat tab. Show active spinner on chat tab. Source: llm_adapter@2026-06-06 Confidence: high	—
Feature	Low	Pass Claude MCP config to SDK sessions. Pass Claude MCP config to SDK sessions. Source: llm_adapter@2026-06-06 Confidence: high	—
Feature	Low	Trigger kanban lane automation when adding cards. Trigger kanban lane automation when adding cards. Source: llm_adapter@2026-06-06 Confidence: high	—
Bugfix
Bugfix	Medium	Fix Claude managed MCP connectors. Fix Claude managed MCP connectors. Source: llm_adapter@2026-06-06 Confidence: high	—
Bugfix	Medium	Fix child sessions incorrectly creating git worktrees when parent has none. Fix child sessions incorrectly creating git worktrees when parent has none. Source: llm_adapter@2026-06-06 Confidence: high	—
Bugfix	Medium	Fix package publish Express dependency skew. Fix package publish Express dependency skew. Source: llm_adapter@2026-06-06 Confidence: high	—

Full changelog

Pass Claude MCP config to SDK sessions by @ferrislucas in https://github.com/ferrislucas/Circus-Chief/pull/970
Show active spinner on chat tab by @ferrislucas in https://github.com/ferrislucas/Circus-Chief/pull/968
Add enable/disable toggle for built-in providers by @ferrislucas in https://github.com/ferrislucas/Circus-Chief/pull/971
Fix Claude managed MCP connectors by @ferrislucas in https://github.com/ferrislucas/Circus-Chief/pull/972
Trigger kanban lane automation when adding cards by @ferrislucas in https://github.com/ferrislucas/Circus-Chief/pull/975
Harden package publish artifacts by @ferrislucas in https://github.com/ferrislucas/Circus-Chief/pull/973
Fix package publish Express dependency skew by @ferrislucas in https://github.com/ferrislucas/Circus-Chief/pull/976
Fix child sessions incorrectly creating git worktrees when parent has none by @ferrislucas in https://github.com/ferrislucas/Circus-Chief/pull/974

Full Changelog: https://github.com/ferrislucas/Circus-Chief/compare/1.7.0...1.12.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Circus Chief

Get notified when new releases ship.

About Circus Chief