kdlbs/kandev

v0.79.0 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 10d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

acp agent-orchestration agentic-ai agentic-development-environment ai-agents claude-code

+13 more

code-review coding-agents developer-tools github-copilot go kanban nextjs self-hosted task-manager tui vibe-coding workflow-automation worktrees

ReleasePort's take

Moderate signal

editorial:auto 10d

The release enforces origin validation on websocket upgrades and adds native app integrations.

Why it matters: Enforcing origin validation mitigates unauthorized websocket connections (severity 80). Native app integrations expand platform capabilities (severity 40).

Summary

AI summary

Updates Bug Fixes, 0.79.0 - 2026-07-16, and Refactoring across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Enforce origin validation on websocket upgrades. Enforce origin validation on websocket upgrades. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature
Feature	Medium	Add native app integrations. Add native app integrations. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Add Grok ACP agent. Add Grok ACP agent. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Show file statuses in review UI. Show file statuses in review UI. Source: llm_adapter@2026-07-16 Confidence: high	—
Performance	Low	Upgrade Vitest and cap local workers. Upgrade Vitest and cap local workers. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix
Bugfix	Medium	Prevent task renames from wiping task repositories. Prevent task renames from wiping task repositories. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Bump @playwright/test to ^1.61.1 to fix install hang on Node 26. Bump @playwright/test to ^1.61.1 to fix install hang on Node 26. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Resolve two cancel/clarification deadlocks that wedge sessions in RUNNING. Resolve two cancel/clarification deadlocks that wedge sessions in RUNNING. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Low	Prevent settings sidebar from closing on first click. Prevent settings sidebar from closing on first click. Source: llm_adapter@2026-07-16 Confidence: high	—
Refactor	Low	Remove legacy settings migration code. Remove legacy settings migration code. Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

[!WARNING]
macOS, Windows desktop installers in this release are unsigned development builds.
They may require manual OS security bypasses and are not trusted downloads.

0.79.0 - 2026-07-16

Features

sync workflows from a configured github repo (#1721)
add native app integrations (#1715)
add archive confirmation preference (#1708)
show file statuses in review (#1683)
rename task inline from the top bar via double-click (#1702)
add opt-in notification sound for waiting-for-input (#1689)
add repository context to quick chats (#1679)
surface agent subscription usage in settings and chat tooltip (#1697)
add Grok ACP agent (#1688) by @zensi-dev
show ACP shell command output in chat (#1684)
unarchive tasks with worktree branch recovery (#1687)
interrupt busy child task turn on parent message_task_kandev (#1653) by @ClemDNL
link GitHub issues to tasks (#1672) (#1676)

Bug Fixes

compact plan implement control (#1719)
improve command palette alias matching (#1718)
render walkthrough surfaces behind dialogs (#1717)
render HTML in markdown previews (#1707)
handle parked task sessions (#1711)
prevent cross-task acknowledgement loops (#1712)
prevent settings sidebar from closing on first click (#1709)
restore persisted tabs after task reload (#1703)
stop task renames from wiping task repositories (#1705)
silence Vitest network noise (#1700)
enforce origin validation on websocket upgrades (#1698)
keep chat readable after right-pane resize (#1682) (#1691)
promote commandless workspace executions (#1692)
align topbar metrics heights (#1694)
repair grok docker auth and archived task control (#1693)
soften deferred clarification notice (#1690)
bump @playwright/test to ^1.61.1 to fix install hang on Node 26 (#1685)
resolve two cancel/clarification deadlocks that wedge sessions in RUNNING (#1680)
prevent stale ready events from completing replacement turns (#1678)
make clipboard fallback work in Radix dialogs (#1671) by @yattdev

Performance

upgrade Vitest and cap local workers (#1696)

Refactoring

remove legacy settings migration (#1704)

Documentation

own public documentation metadata (#1713)
add curated public documentation (#1701)
improve harness and issue templates (#1681)

Breaking Changes

Removed legacy settings migration code

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track kdlbs/kandev

Get notified when new releases ship.

About kdlbs/kandev

All releases →