This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
ReleasePort's take
Moderate signalmultica v0.2.31 expands chat with native attachments and images, hardens attachment serving with tightened upload gates, and stabilizes navigation and workflow features.
Why it matters: Chat attachments enable multimedia collaboration. Attachment serving hardening tightens upload security. Timeline virtualization improves issue detail performance. Test chat workflows in dev; routine upgrade for stable teams.
Summary
AI summaryChat now supports attachments and images.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Local sidecar attachment serving hardened with tightened upload gate. Local sidecar attachment serving hardened with tightened upload gate. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
GitHub App integration links pull requests to issues. GitHub App integration links pull requests to issues. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Chat input now supports attachments and images. Chat input now supports attachments and images. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
CreateAgent and UpdateAgent support public/private visibility gates. CreateAgent and UpdateAgent support public/private visibility gates. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Confirmation dialog required before terminating single tasks. Confirmation dialog required before terminating single tasks. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Feedback mechanism nudges users toward GitHub discussion. Feedback mechanism nudges users toward GitHub discussion. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Performance | Medium |
Issue detail timeline virtualized for improved performance. Issue detail timeline virtualized for improved performance. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Issues auto-close only after all linked PRs resolve. Issues auto-close only after all linked PRs resolve. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Deep-linked issue detail pages land reliably without virtualization. Deep-linked issue detail pages land reliably without virtualization. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Chat editor remains mounted across lazy session creation. Chat editor remains mounted across lazy session creation. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Deep-linked views land correctly via cooperative scroll passes. Deep-linked views land correctly via cooperative scroll passes. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Attachment downloads preserve original filenames. Attachment downloads preserve original filenames. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Virtualized deep-linked views land via settle-by-silence mechanism. Virtualized deep-linked views land via settle-by-silence mechanism. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Issue creation dialog text input height corrected. Issue creation dialog text input height corrected. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Multica app icon restored on Linux desktop. Multica app icon restored on Linux desktop. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
System-actor notifications display Multica logo. System-actor notifications display Multica logo. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Daemon runtimes documentation link corrected. Daemon runtimes documentation link corrected. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Installation list removed from Settings integrations tab. Installation list removed from Settings integrations tab. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Runtime visibility description moved to hover tooltip. Runtime visibility description moved to hover tooltip. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Feedback component displays brand-colored GitHub call-to-action. Feedback component displays brand-colored GitHub call-to-action. Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
Changelog
- b7cd7e9adfbc773872ccd9a44325d862843dd8f1 docs(changelog): add 0.2.30 release notes for 2026-05-11 (#2416)
- 2e4d6aa3a9dd98544eb9166bf1bcdf62957951d8 docs(integrations): add GitHub PR ↔ issue integration feature page and self-host setup (MUL-2090) (#2474)
- bb312002d1f4f430846e9bcb6cc9c99a613d6ce5 docs(self-hosting): document Caddy WebSocket essentials (#2436)
- 86aa5199fc8095c2a8cbd3e692c69862546cf91b feat(chat): support attachments & images in chat input (#2445)
- 723489d2a90e0ce8e47dd5bf62056d7ebb558265 feat(feedback): nudge users toward GitHub for discussion and faster traction (#2451)
- caeb146bac102091789a7324213dec397b8a5928 feat(github): GitHub App integration for PR ↔ issue linking (#1817)
- 01bcede2ad3fafab529b8c921e361ebacb785f1e feat(issues): confirm before terminating a single task (#2466)
- 63d215e1c340104134e8dd66e59bc62de036482b feat(runtime): visibility (public/private) gate on CreateAgent / UpdateAgent (#2419)
- f08b2b4f5028477f9d78f9d3ede4069cc9ea93a9 fix(attachments): harden local sidecar serving and tighten Upload gate (#2459)
- 91bdec9a541e9e7acddce257c7759bc9f0f825c0 fix(attachments): preserve original filename on /uploads/* downloads (#2444)
- a1c2d539398d4c7ab86416543d1e391788a073ed fix(chat): keep editor mounted across lazy session creation (#2457)
- b58567ed6c16f2c591d12ded58071ae7d356ace9 fix(desktop): restore Multica app icon on Linux (#2437)
- a02e58b4886b23711bc8bab14359b57f153952b8 fix(github): only auto-close issue after all linked PRs resolve (#2470)
- e3e61c161cadffba1942af39fc5daef3d5033c8a fix(inbox): show Multica logo for system-actor notifications (#2479)
- 61ca43835a5834e911fbaa393a45431bc81bfce7 fix(issue-detail): drop virtualization when deep-linking, restore reliable landing (#2472)
- da03c832512a405a47f4b890e19c3ba0cfffd44a fix(modals): correct text input height in issue creation dialog (#2434)
- 0e7fa2183261cc366746fee3cedfafddb94dd872 fix(runtimes): correct broken docs link to /docs/daemon-runtimes (#2465)
- b21f69f31a46275731e3e8358b61e4f072c668a3 fix(views): land deep-link via cooperative scroll passes (#2452)
- 208f1ddb29434c94c33bae03274a8f27b84bb973 fix(views): land virtualized deep-link via settle-by-silence (#2449)
- fb8ad8cc5ed833de37c7601b2005e1dd2210daeb perf: virtualize issue detail timeline + seed test scaffolding (#2413)
- 23c05f13c44b22078a3364ea0f9466f039df91bf refactor(feedback): replace generic description with brand-colored GitHub CTA (#2455)
- f17acc21de26b00de5525323b39731739017b357 refactor(integrations): drop installation list from Settings tab (#2468)
- 2eefa3b90b2e6039ac29df478f407f91c18c23e4 refactor(runtime): move visibility description to hover tooltip (#2435)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About multica
The open-source managed agents platform. Turn coding agents into real teammates — assign tasks, track progress, compound skills.
Related context
Related tools
Earlier breaking changes
- v0.3.8 Removes custom_env from agent resources, adds audited env endpoint (MUL-2600)
Beta — feedback welcome: [email protected]