This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryUpdates Chores, deps, and 0.29.0] - 2026-06-04 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Add jira and slack mcp tool options Add jira and slack mcp tool options Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Add integration middleware primitive Add integration middleware primitive Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Add webhook middleware gate Add webhook middleware gate Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Migrate slack url verification to webhook middleware Migrate slack url verification to webhook middleware Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Add slack assistant manifest defaults Add slack assistant manifest defaults Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Set slack assistant status during webhooks Set slack assistant status during webhooks Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump e2b from 2.19.0 to 2.27.0 Bump e2b from 2.19.0 to 2.27.0 Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump react-resizable-panels from 4.11.0 to 4.11.2 Bump react-resizable-panels from 4.11.0 to 4.11.2 Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump @types/node from 25.8.0 to 25.9.1 Bump @types/node from 25.8.0 to 25.9.1 Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump @base-ui/react from 1.4.1 to 1.5.0 Bump @base-ui/react from 1.4.1 to 1.5.0 Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump @opentelemetry/exporter-trace-otlp-http from 0.217.0 to 0.218.0 Bump @opentelemetry/exporter-trace-otlp-http from 0.217.0 to 0.218.0 Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump hyper from 1.9.0 to 1.10.0 in sandboxd Bump hyper from 1.9.0 to 1.10.0 in sandboxd Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump opentelemetry_sdk from 0.32.0 to 0.32.1 in sandboxd Bump opentelemetry_sdk from 0.32.0 to 0.32.1 in sandboxd Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump crate-ci/typos from 1.46.3 to 1.47.0 Bump crate-ci/typos from 1.46.3 to 1.47.0 Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump date-fns from 4.1.0 to 4.3.0 Bump date-fns from 4.1.0 to 4.3.0 Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump @rjsf/utils from 6.5.3 to 6.6.1 Bump @rjsf/utils from 6.5.3 to 6.6.1 Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump @storybook/react-vite from 10.4.0 to 10.4.1 Bump @storybook/react-vite from 10.4.0 to 10.4.1 Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Advance triggers after refresh snapshot success Advance triggers after refresh snapshot success Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Low |
Stabilize runtime system tests Stabilize runtime system tests Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Accept degraded sandbox status Accept degraded sandbox status Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Bound tensorlake sandboxd shutdown Bound tensorlake sandboxd shutdown Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Remove degraded parser helper Remove degraded parser helper Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Add bootstrap tunnel disconnect diagnostics Add bootstrap tunnel disconnect diagnostics Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Skip slack session link for empty text Skip slack session link for empty text Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Capture bootstrap tunnel diagnostic evidence Capture bootstrap tunnel diagnostic evidence Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Refactor | Low |
Rename sandbox disk resource fields Rename sandbox disk resource fields Source: llm_adapter@2026-06-04 Confidence: high |
— |
Full changelog
[0.29.0] - 2026-06-04
Features
- Add jira and slack mcp tool options (#2661)
- Add integration middleware primitive (#2662)
- Add webhook middleware gate (#2663)
- Migrate slack url verification to webhook middleware (#2665)
- Add webhook middleware state (#2667)
- Add slack assistant manifest defaults (#2671)
- Set slack assistant status during webhooks (#2679)
Bug Fixes
- Advance triggers after refresh snapshot success (#2660)
- Stabilize runtime system tests (#2666)
- Accept degraded sandbox status (#2668)
- Bound tensorlake sandboxd shutdown (#2669)
- Remove degraded parser helper (#2670)
- Add bootstrap tunnel disconnect diagnostics (#2678)
- Skip slack session link for empty text (#2680)
- Capture bootstrap tunnel diagnostic evidence (#2682)
Refactors
- Rename sandbox disk resource fields (#2664)
Chores
- (deps) Bump e2b from 2.19.0 to 2.27.0 (#2652)
- (deps) Bump react-resizable-panels from 4.11.0 to 4.11.2 (#2653)
- (deps) Bump @types/node from 25.8.0 to 25.9.1 (#2657)
- (deps) Bump @base-ui/react from 1.4.1 to 1.5.0 (#2656)
- (deps) Bump @opentelemetry/exporter-trace-otlp-http from 0.217.0 to 0.218.0 (#2658)
- (deps) Bump hyper from 1.9.0 to 1.10.0 in /packages/sandboxd (#2654)
- (deps) Bump opentelemetry_sdk from 0.32.0 to 0.32.1 in /packages/sandboxd (#2655)
- (deps) Bump crate-ci/typos from 1.46.3 to 1.47.0 (#2672)
- (deps) Bump date-fns from 4.1.0 to 4.3.0 (#2673)
- (deps) Bump lefthook from 2.1.6 to 2.1.8 (#2674)
- (deps) Bump @rjsf/utils from 6.5.3 to 6.6.1 (#2676)
- (deps) Bump @smithy/hash-node from 4.2.14 to 4.3.5 (#2675)
- Update slack cli tool release (#2681)
- (deps) Bump @storybook/react-vite from 10.4.0 to 10.4.1 (#2677)
- (release) V0.29.0 (#2683)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Mistle
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]