This release adds 4 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
ReleasePort's take
Moderate signalThe release pins @xmldom/xmldom to ^0.8.13 and adds CLI version output in daemon status.
Why it matters: Forcing @xmldom/xmldom to ^0.8.13 ensures dependency consistency; the new daemon‑status version line helps SREs instantly verify runtime versions.
Summary
AI summaryAdded CLI version display in daemon status, isolated agent host skills via config, documented task rollup requirement, enhanced sorting and UI for issues/list/views, fixed several bugs across agents, chat, server, and deps.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Show CLI version in daemon status output. Show CLI version in daemon status output. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Add issue view swimlane capability (MUL-2607). Add issue view swimlane capability (MUL-2607). Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Surface host OAuth token via environment variable on macOS agent isolation. Surface host OAuth token via environment variable on macOS agent isolation. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Enable sticky group headers in list view. Enable sticky group headers in list view. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Low |
Add per-agent toggle to isolate host-machine skills (MUL-2603). Add per-agent toggle to isolate host-machine skills (MUL-2603). Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Feature | Low |
Hide `skills_local` toggle for runtimes that don't honour it (MUL-2603). Hide `skills_local` toggle for runtimes that don't honour it (MUL-2603). Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Feature | Low |
Add server‑side sort and fix drag position corruption in issues view. Add server‑side sort and fix drag position corruption in issues view. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Dependency | Low |
Force @xmldom/xmldom to ^0.8.13 via pnpm overrides. Force @xmldom/xmldom to ^0.8.13 via pnpm overrides. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Deprecation | High |
Remove per‑agent local skill toggle (revert of MUL-2603). Remove per‑agent local skill toggle (revert of MUL-2603). Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Mirror $HOME/.claude.json into isolated config directory for agents. Mirror $HOME/.claude.json into isolated config directory for agents. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Fix drag‑and‑drop reordering and loadMore sort issues in list component. Fix drag‑and‑drop reordering and loadMore sort issues in list component. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Gate GitHub auto‑close on closing keywords (MUL-2680). Gate GitHub auto‑close on closing keywords (MUL-2680). Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Cascade‑archive agents when their runtime is deleted (MUL-2667). Cascade‑archive agents when their runtime is deleted (MUL-2667). Source: llm_adapter@2026-05-26 Confidence: low |
— |
| Bugfix | Low |
Unify expand and drag‑to‑max rendering in chat component (MUL-2653). Unify expand and drag‑to‑max rendering in chat component (MUL-2653). Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Low |
Refresh stale Codex config copies across environment reuse in daemon/execenv. Refresh stale Codex config copies across environment reuse in daemon/execenv. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Low |
Add ESLint phantom dependency detection and fix existing violations (MUL-2654). Add ESLint phantom dependency detection and fix existing violations (MUL-2654). Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Low |
Ensure thread sort through load‑more so appended pages render correctly in issues (MUL-2678). Ensure thread sort through load‑more so appended pages render correctly in issues (MUL-2678). Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Low |
Trigger assignee update when agent moves backlog to active state (MUL-2670). Trigger assignee update when agent moves backlog to active state (MUL-2670). Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Low |
Require sibling dependency check before promoting backlog in child‑done handler (MUL-2618). Require sibling dependency check before promoting backlog in child‑done handler (MUL-2618). Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Bugfix | Low |
Always show assignee meta row on board cards when the assignee property is enabled. Always show assignee meta row on board cards when the assignee property is enabled. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
Full changelog
Changelog
- 83ecad4789a6923ff7181d19a39ed648b9550967 MUL-2690 fix(deps): force @xmldom/xmldom to ^0.8.13 via pnpm overrides (#3290)
- 382e294e8c4bfa1ac4a310c0f3e536e580012494 Show CLI version in daemon status (#3212)
- 88fe6d754fe26fdf0eb228bb286d32457e2948e6 docs(cli): list valid statuses in issue status --help (#3239)
- 46f7ac6bac49d1ab82e84cf07810a4f86daffa7d docs(self-host): document task_usage_hourly rollup requirement (MUL-2682) (#3280)
- 960befa56fc0ecba5aecdaeb2ddcab8f721be55f feat(agent): per-agent toggle to isolate host-machine skills (MUL-2603) (#3200)
- 0b50c5a209d7843b2c06196cf04867a4d43f1549 feat(agents): hide skills_local toggle for runtimes that don't honour it (MUL-2603) (#3276)
- 612ac8f28e05dd9096b7dc7fcfc7c4ad0858c439 feat(issues): server-side sort + fix drag position corruption (#3228)
- 30a7da6d10f508c5b938cc19074869ad1b6dc42e feat(list): drag-and-drop reordering + loadMore sort fix (#3284)
- bf8a346cf0c9ebf69bf20ea349c86647a1e40169 feat(runtimes): cascade-archive agents on runtime delete (MUL-2667) (#3266)
- e33b893c3f85a4306047076f508943d639077ea3 feat(views): sticky group headers in list view (#3221)
- 65ed5744a6d17b870e3abf4e002b5e21c39608e0 feat: add issue view swimlane (MUL-2607) (#3149)
- 40da88fc16fb6868bfe59f3343f6423442a754f2 fix(agent): mirror $HOME/.claude.json into isolated config dir (MUL-2661) (#3261)
- a67bf81225f2b079a0bd24f7850214861cd2182c fix(agent): surface host OAuth token via env var on macOS isolation (MUL-2603) (#3267)
- d8075a57755d3574a45ac306baf7c263d2e4e442 fix(agents): tighten skills-tab intro and drop redundant import hint (#3265)
- c5b4c45e41bc3fec8dbfc066edf63ab3bc7db477 fix(chat): unify expand and drag-to-max rendering (MUL-2653) (#3235)
- 6bc3d14eb3d812024eaaf409742c8d6a2fc76342 fix(daemon/execenv): refresh stale Codex config copies across env reuse (MUL-2646) (#3268)
- ec1589f7b6e5af01f5ea057ef353611d8abd832a fix(deps): add eslint phantom dep detection + fix existing violations (MUL-2654) (#3249)
- 057cb2ff340524caef5f0d876c77f3d1d73382b0 fix(issues): thread sort through load-more so appended pages render (MUL-2678) (#3279)
- ae11f290b42506c1b809a68278927a7f4a5442cf fix(server): gate GitHub auto-close on closing keywords (MUL-2680) (#3281)
- 77c7267105079e1c03bea6f255ec65a96f80b04b fix(server): trigger assignee on agent-driven backlog→active (MUL-2670) (#3270)
- e6324aad6c1703afc7b0a5519de1bcb39466e648 fix(server/child-done): require sibling dependency check before promoting backlog (MUL-2618) (#3272)
- 312ee29cb69838e2d79b3d0def0d1934ae6f050c fix(views): always show assignee meta row on board cards when assignee property is enabled (#3250)
- 91506e7f7bc6f1d4cbba5c9ff03bac6fd6adcd4c refactor(cli): rename daemon status helper and align value column (MUL-2676) (#3275)
- 744b474199f98f65598c27caa0f669747f37dd97 revert(agent): remove per-agent local skill toggle (MUL-2603) (#3286)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About multica
The open-source managed agents platform. Turn coding agents into real teammates — assign tasks, track progress, compound skills.
Related context
Related tools
Earlier breaking changes
- v0.3.8 Removes custom_env from agent resources, adds audited env endpoint (MUL-2600)
Beta — feedback welcome: [email protected]