Skip to content

Paseo

v0.1.71 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ade agents claude-code codex copilot developer-tools
+5 more
gemini mobile opencode orchestration pi

Affected surfaces

auth

Summary

AI summary

Updates 0.1.71 - 2026-05-09, Improved, and https://github.com/getpaseo/paseo/pull/833 across a mixed release.

Full changelog

0.1.71 - 2026-05-09

Added

  • Import existing Claude, Codex, and OpenCode sessions into Paseo — pick up a conversation you started in the terminal and keep going from the app, with the full timeline. (#766, #833)
  • Subagents now appear in a collapsible section above the composer so you can jump into agents your main agent spawned. (#532)
  • Merge a pull request directly from the checkout pane. (#814)
  • Customize the per-project prompts Paseo uses to auto-generate agent titles, branch names, commit messages, and pull request descriptions. (#836)
  • Open an empty workspace without typing a prompt first. (#834)
  • Project settings are now grouped with inline links to the relevant docs. (#837)
  • Rich context menu on desktop — copy link, copy image, and spellcheck suggestions.
  • Archiving a Codex-backed agent now archives the underlying native Codex thread too. (#827 by @32r4)

Improved

  • Opening a workspace auto-focuses the agent that needs your attention. (#828)
  • An unattended agent that spawns a sub-agent on a different provider via MCP now starts the sub-agent in unattended mode too.

Fixed

  • iOS project picker now submits the typed path. (#831)
  • System messages and chat mentions routed to multiple agents now reach every recipient consistently. (#830)
  • Clicking a Markdown link in agent output no longer reloads the desktop app on top of opening the link.

Security

  • Local state files (daemon keypair, stored credentials, persisted config) are now readable only by the owning user. (#825 by @joaosa)

Security Fixes

  • Local state files (daemon keypair, credentials, config) now readable only by the owning user

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Paseo

Get notified when new releases ship.

Sign up free

About Paseo

All releases →

Related context

Beta — feedback welcome: [email protected]