This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryFixed a TOCTOU race condition when reserving claimed chats in the Telegram integration.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Fixes TOCTOU race condition in telegram processOne by reserving claimedChats. Fixes TOCTOU race condition in telegram processOne by reserving claimedChats. Source: llm_adapter@2026-07-16 Confidence: low |
— |
Full changelog
What's Changed
- fix(telegram): reserve claimedChats in processOne to close drain-path TOCTOU (#603) by @griffinwork40 in https://github.com/griffinwork40/agent-afk/pull/630
Full Changelog: https://github.com/griffinwork40/agent-afk/compare/v5.54.0...v5.54.1
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Agent AFK
Coding-agent harness built for unattended, away-from-keyboard runs across four surfaces sharing one session manager: one-shot CLI, REPL, cron-friendly headless daemon, and a Telegram bot. Editable agent loop (prompts, permission gates, model routing, explicit terminal states), MCP (stdio/HTTP/SSE + OAuth), lifecycle hooks, background subagents, plan mode, cross-session memory, and an append-only trace receipt (`afk trace show`). Works with Anthropic and any OpenAI-compatible endpoint (GPT, Codex, local MLX/llama.cpp/Ollama)
Related context
Related tools
Beta — feedback welcome: [email protected]