Skip to content

multica

v0.3.36 Feature

This release adds 5 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Affected surfaces

auth rbac

Summary

AI summary

Broad release touches agents, MUL-4010, helm, and composio.

Full changelog

Changelog

  • 1e85eb0aacf2ff5f3e50aa38ebd95b486bab9968 Fix Kiro ACP usage accounting (#4867)
  • 30e1e546cf75968f343edb4cc4f7a0d72bc1a6c0 MUL-3355: feat(helm): support external PostgreSQL via postgres.external.enabled
  • d4f57aff7aca3aa731188c5ec972727b90a07b2d MUL-3944: Fix daemon agent discovery around hook wrappers (#4817)
  • 77ba0fdddbfc443dfa56ae92ad772792c2847998 MUL-4009: hide not-configured Composio toolkits at Service layer (#4880)
  • dd9996d0aa5c3a988513cee07c5deed06fcbcd4e MUL-4014: persist transcript filters and expansion (#4884)
  • 098b1f63620f9230e2561801e833d3c73b125981 MUL-4015: stamp source_task_id on HTTP-authored agent comments (#4886)
  • 910bbe93097594a5a8cfafa022e998989da70090 MUL-4024 tighten squad leader self-trigger guard (#4896)
  • 022c8a63d0891a3acabd9f1cf71960dd4a320a27 docs(changelog): add v0.3.36 entry for the 2026-07-03 release (#4893)
  • b24b63c51301e23a988caaabbbbe6cbfd04e6df6 feat(agents): align create-agent visibility with MUL-3963 access model (MUL-4010) (#4879)
  • cb68669c73937cb978170b7a83008277900138a8 feat(composio): gate MCP apps behind feature flag (#4876)
  • c7e10ffa856f0aebcbc8dffc9043a34bd6fe3c57 fix(agent): offer no Claude effort levels when the CLI predates --effort
  • 4d968ba87521a280dd55d6b91428de853184958c fix(agents): gate create-agent access picker on composio_mcp_apps flag (MUL-4010) (#4888)
  • d90ee9fa3553ab8cca17cb53c2d41acd0a086da8 fix(agents): thread permission_mode/invocation_targets through the template create path (MUL-4010) (#4897)
  • 942255d283a30dfb296fd93afd945f20caa9d91f fix(autopilot): keep create_issue runs visible when runtime offline (#4848)
  • 65269ef9221a0edad222a062da4c29cc65a771ea fix(daemon): copy Codex model catalog into task home
  • 84a5853363a57eb2163f2af35c7bb6f753638a32 fix(desktop): restore correct filename in save dialog for attachment downloads (#4296)
  • 8f51b4f62fedce5ce649fc20fc0b732dd2f93cd7 fix(editor): repair empty list items parsed from a markdown draft (#4869)
  • e3e3e7e23ff6153f8888eacca3132d8ca38d8cac fix(realtime): bounded replay window for ShardedStreamRelay on restart (#4875)
  • 4ed8f7478fdd29940cf472d63d9052edd4aea0f7 fix(server): key reviewer-loop dedup on reviewed commit SHA (MUL-4003) (#4873)
  • 8797667fac42091abc4f70542017cd80bcf88b40 fix(slack): prefer attachment body over fallback (#4866)
  • a06fc273406d75ff67b07a052333c99870be2d39 fix(web): redirect legacy squads and usage routes (#4833)
  • 6b70146570823547d43ceb6b347fb741c650b049 test(rollup): serialise shared-singleton rollup tests across packages (MUL-3980) (#4854)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track multica

Get notified when new releases ship.

Sign up free

About multica

The open-source managed agents platform. Turn coding agents into real teammates — assign tasks, track progress, compound skills.

All releases →

Related context

Earlier breaking changes

  • v0.3.8 Removes custom_env from agent resources, adds audited env endpoint (MUL-2600)

Beta — feedback welcome: [email protected]