This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryDesktop, markdown rendering, agent runtime handling, issues UI fixes, and lists surface rebuild across multiple modules.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds managed MCP config support for Cursor. Adds managed MCP config support for Cursor. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Feature | Low |
Introduces CLI workspace repository registry management. Introduces CLI workspace repository registry management. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Feature | Low |
Rebuilds all six list surfaces on a shared Linear‑style grid. Rebuilds all six list surfaces on a shared Linear‑style grid. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Feature | Low |
Supports connecting to an existing OpenClaw gateway. Supports connecting to an existing OpenClaw gateway. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Bugfix | Medium |
Cmd+W closes active tab first, then window on desktop. Cmd+W closes active tab first, then window on desktop. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes pasted image draft rendering issues in desktop. Fixes pasted image draft rendering issues in desktop. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Bugfix | Medium |
Flushes issue description edits when closing the editor. Flushes issue description edits when closing the editor. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Bugfix | Medium |
Repairs split email links caused by autolink with inclusive:false. Repairs split email links caused by autolink with inclusive:false. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Bugfix | Medium |
Resolves 500 error when uploading files via self‑hosted Docker Compose. Resolves 500 error when uploading files via self‑hosted Docker Compose. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Bugfix | Medium |
Fail closed agent task when auth tokens are invalid. Fail closed agent task when auth tokens are invalid. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Shows Cursor Composer token usage and billing information. Shows Cursor Composer token usage and billing information. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Bugfix | Low |
Disable single-dollar inline math in web markdown renderer. Disable single-dollar inline math in web markdown renderer. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Parse Cursor token usage fields in agent. Parse Cursor token usage fields in agent. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Remove duplicate emoji reaction entry from comment header. Remove duplicate emoji reaction entry from comment header. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Restore issue detail scroll position when navigating back. Restore issue detail scroll position when navigating back. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Navigate list rows via onClick instead of nested anchors. Navigate list rows via onClick instead of nested anchors. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Allow attachment download file‑card hrefs in markdown. Allow attachment download file‑card hrefs in markdown. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Keep dollar amounts literal in editor markdown input. Keep dollar amounts literal in editor markdown input. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Normalize cached input usage for codex. Normalize cached input usage for codex. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Preserve inbox comment anchors after reloads. Preserve inbox comment anchors after reloads. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Preserve OpenClaw gateway token mask during operations. Preserve OpenClaw gateway token mask during operations. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Re‑sign inline attachment media URLs for token‑mode clients. Re‑sign inline attachment media URLs for token‑mode clients. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Re‑sign unresolved attachment media URLs. Re‑sign unresolved attachment media URLs. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
| Bugfix | Low |
Validate self‑hosted compose environment variable defaults. Validate self‑hosted compose environment variable defaults. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
Full changelog
Changelog
- 93541be9759d8c047f7fef744baeb0f328297784 MUL-3239: include route context in desktop recovery prompts
- 90fafab33a41e248e1297bebd572e5943e23d328 MUL-3240: fix(desktop): Cmd+W closes active tab first, then window
- fa1504186498b004caac3614a7d2a5f9be6fd129 MUL-3254: fix pasted image draft rendering in desktop (#4066)
- ef08d8584c35824570e209ab3499ee231a6cdcb8 MUL-3254: flush issue description edits on close (#4082)
- f415099c4a24f32e57cf8c7904a98db96822591a MUL-3263: support managed MCP config for Cursor (#4081)
- 70b90d287c68d568a4fad817c54343e5431b7f74 MUL-3267: fix(markdown): disable single-dollar inline math in web renderer
- a4fb84d5ac706a491b5c30ad8bf3316a5cffb893 MUL-3273: fix(agent): parse Cursor token usage fields
- 2ab7b5b7afa4e5d4a8af68da51df512f0d27a12a MUL-3280: fix(editor): repair split email links caused by autolink + inclusive:false
- 8ea8048005e818f7053391ddaee5494a666c1151 MUL-3290: fix selfhost docker compose upload 500
- 12c2d58e18603bd7b7550a8d4fffc3fa3645e710 MUL-3303: add 2026-06-15 changelog entry (#4150)
- 7db3e507d17bdeb6926f7c6e13c3164a48cc97f8 feat(cli): manage workspace repo registry (#4067)
- 63cf0ed3081accd9a7cbcc2f588300fdb8e73580 feat(lists): rebuild all six list surfaces on a shared Linear-style list grid (#4038)
- 34d4cd3a28b549d85e3cefe53b9a9fade34b65ff feat(openclaw): support connecting to existing OpenClaw gateway (#3260) [MUL-3158] (#3664)
- 0e31a9ca58cdeda1b4b1559f53c4ff373cb067c2 fix(agent/runtimes): show Cursor Composer token usage and billing (#4135)
- ea4f816ce2bd10109bce2e6d0424811804f37264 fix(comments): support edit trigger suppression (#4136)
- 7bd99c3c87d9ec9b3b032fe1c4e1523074bee8c0 fix(desktop): mount Cmd+W handler at app root (#4137)
- 7d28b5a040bd173eac0161c266338e949dd7f100 fix(issues): remove duplicate emoji reaction entry from comment header (#4068)
- 40b318e3e084c928e72bf036b92e6fe3519d6a85 fix(issues): restore issue detail scroll on back (MUL-2841) (#3539)
- 3ce4cf6f2f775c2da3a3acd031718b6025f5c432 fix(lists): navigate rows via onClick, not a nested row anchor (#4146)
- 76c687d39aac6a0060a50a31653f22064818ab19 fix(markdown): allow attachment download file-card hrefs (#4145)
- 04a0677704af2f5e3c2bd05032dcbbcefc99dda5 fix(markdown): keep dollar amounts literal in editor (#4084)
- f9c193e06bbf608c28ed3a6d00917a71dcf47fdd fix: fail closed on agent task auth tokens (#4142)
- 5b7eb9ad20ef36d1b218bb4e2a5377c083a971c6 fix: normalize codex cached input usage (#4083)
- 71eb938a67cb21710e6b5e833b18b371be8a8411 fix: preserve inbox comment anchors for MUL-3294 (#4139)
- 7d30ef1c67e6da0bfa4e1a873deea088d1bda427 fix: preserve openclaw gateway token mask (#4152)
- 6c17771cce330d2085af0be90555860be5dfb7f5 fix: re-sign inline attachment media for token-mode clients (#4085)
- 9a7eebb194a7a0615e8ef14042106b2fd94b135b fix: re-sign unresolved attachment media urls (#4132)
- 4df6c1468d1c970186ee7e373ba99e9833194174 fix: validate selfhost compose env defaults (#4138)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About multica
The open-source managed agents platform. Turn coding agents into real teammates — assign tasks, track progress, compound skills.
Related context
Related tools
Earlier breaking changes
- v0.3.8 Removes custom_env from agent resources, adds audited env endpoint (MUL-2600)
Beta — feedback welcome: [email protected]