This release adds 4 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryUpdates to autopilots webhook filters, comments attachments and processing, views swimlane grouping, agents diagnostics, CLI output, editor handling, i18n translations, and project resource docs.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds webhook event filters per trigger for autopilots. Adds webhook event filters per trigger for autopilots. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Medium |
Adds support for mcn_ Cloud Node PATs verified via Fleet in auth. Adds support for mcn_ Cloud Node PATs verified via Fleet in auth. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Medium |
Allows selecting multiple attachments when updating comments. Allows selecting multiple attachments when updating comments. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Low |
Adds swimlane support for parent, project, and assignee grouping in views (MUL-2711). Adds swimlane support for parent, project, and assignee grouping in views (MUL-2711). Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Feature | Low |
Supports local working directory for projects (MUL-2618 v1). Supports local working directory for projects (MUL-2618 v1). Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Medium |
Normalizes relative avatar URLs in desktop and web clients. Normalizes relative avatar URLs in desktop and web clients. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Preserves parent_issue_id through Create with agent flow in create-issue. Preserves parent_issue_id through Create with agent flow in create-issue. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Shows real MEMBERS count in `multica squad list` CLI command. Shows real MEMBERS count in `multica squad list` CLI command. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Removes obsolete 'chat' subcommand from agent cursor argv. Removes obsolete 'chat' subcommand from agent cursor argv. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Gates on_comment trigger with private-agent visibility. Gates on_comment trigger with private-agent visibility. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Renders trigger output in trigger timezone for autopilot. Renders trigger output in trigger timezone for autopilot. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Clears editor immediately on comment submit to eliminate WS race glitch. Clears editor immediately on comment submit to eliminate WS race glitch. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Low |
Fixes empty swimlane lanes caused by pagination (MUL-2724). Fixes empty swimlane lanes caused by pagination (MUL-2724). Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Surfaces Codex app-server no‑progress diagnostics in agent. Surfaces Codex app-server no‑progress diagnostics in agent. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Defer input clearing in comments until submit succeeds. Defer input clearing in comments until submit succeeds. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Supports edit‑time attachment removal in comments. Supports edit‑time attachment removal in comments. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Anchors Source popover to top in create-project to prevent overflow when modal expands. Anchors Source popover to top in create-project to prevent overflow when modal expands. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Detects Codex Desktop bundle CLI in daemon. Detects Codex Desktop bundle CLI in daemon. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Preserves raw HTML‑like text on paste in editor. Preserves raw HTML‑like text on paste in editor. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Renders code blocks when lowlight highlightAuto returns empty tree in editor. Renders code blocks when lowlight highlightAuto returns empty tree in editor. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Cleans up zh‑Hans translation inconsistencies in i18n. Cleans up zh‑Hans translation inconsistencies in i18n. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Moves local-directory hint out of comment composer in issues. Moves local-directory hint out of comment composer in issues. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Removes orphan repo count from GitHub tab shortcut card in settings. Removes orphan repo count from GitHub tab shortcut card in settings. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Keeps sort label centered during board scroll in views. Keeps sort label centered during board scroll in views. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Low |
Attributes Hermes usage to the current model (MUL-2696). Attributes Hermes usage to the current model (MUL-2696). Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Refactor | Low |
Centralizes timezone default handling in autopilot and adds fallback for invalid timezones (MUL-2742). Centralizes timezone default handling in autopilot and adds fallback for invalid timezones (MUL-2742). Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
Full changelog
Changelog
- 963c33f030ec65a21b8296625180e6600755a6fa MUL-2618 docs(project-resources): document local_directory resource type (#3347)
- 2b5696703f1f5b38a95d32fccee1380279d2f3ff MUL-2703: feat(autopilots): webhook event filters per trigger (MUL-2334 follow-up) (#3231)
- 746c0c4456d83fe73e194edca21335f89e8639c5 MUL-2746 fix(avatar): normalize relative avatar urls in desktop/web (#3100)
- d16ed2806aa36916030f6048bd3bef4102b81504 MUL-2748 docs(autopilots): document webhook event filters + link from UI (#3359)
- 0dcc35edc844292dbfe5858fe26268a6c14e82de ci: split mobile lint/typecheck out of frontend job (#3346)
- be32e5af00c74cda60c2fe8c47d31402bc62b3a6 docs(changelog): add v0.3.10 release notes (#3362)
- c968c13c879f378fc199069125675a5e3a193bad feat(auth): support mcn_ Cloud Node PATs verified via Fleet (#3349)
- 31b58494cf12eb5a8cc7da849cbd3b6065933c13 feat(comments): align UpdateComment post-processing with CreateComment (#3337)
- 963ed5cd0efc6b6412140cbbbec60e31825a0502 feat(comments): allow selecting multiple attachments
- fa2a0e57eca623600edcc748c9b3b3adfb24f53e feat(views): swimlane supports parent / project / assignee grouping (MUL-2711) (#3311)
- 341ce7bfa515ef87b2a506dc3d1e66d9652db461 feat: support local working directory for projects (MUL-2618 v1) (#3283)
- 311cf4d99842caa5f2ad63618fcefacfc67ffaad fix(agent): surface Codex app-server no-progress diagnostics (MUL-2688)
- f02bc56e70e81d5ba0eba347a14dc187f70b4030 fix(agent/cursor): remove obsolete 'chat' subcommand from argv (#3077) (#3092)
- 735f18a4ef7a294d1352b381ea92936e9f67905c fix(agents): drop the import-hint callout on agent Skills tab (again) (#3301)
- 298f54c81942916a3ed74a2a2b49b94c7b6fff37 fix(agents): gate on_comment trigger with private-agent visibility (MUL-2702) (#3302)
- 607e64d722319461887fff5549cdf702ff9fa405 fix(autopilot): render trigger output in trigger timezone (#3324)
- 668fe99cceb51d85933245a1e095fe8b20745217 fix(cli): drop "Showing N comments." stderr preamble on issue comment list (#3341)
- df02fcf175f859868aeacd44858da0cb0a8c813c fix(cli): show real MEMBERS count in
multica squad list(#3307) - 6261e2b6b2d58dd318522b0904559d46b2b701d6 fix(comments): clear editor immediately on submit to eliminate WS race glitch (#3331)
- 2af2f7b3e49e4b98e6dc18212bef74e93dac16da fix(comments): defer input clearing until submit succeeds (#3344)
- 7d24a8594ab0ab7990f27d5620ce24d5215382bb fix(comments): support edit-time attachment removal (#2965)
- 17714c3ad13ce0d0bb08dc725a9a1bf5bb311511 fix(create-issue): preserve parent_issue_id through Create with agent flow (MUL-2534) (#3083)
- 329fc0139dbdc0fd30bcf9c8ae046dcf69bf7c9d fix(create-project): anchor Source popover to top so it doesn't get pushed below the trigger when the modal is expanded
- 7bc1aa756386f96dede38529890594fde2bcd2b1 fix(daemon): detect Codex Desktop bundle CLI (#3332)
- 171ee842d44f28b866d69a21383ee43a1f9c2d9f fix(editor): preserve raw html-like text on paste (#3355)
- 85daf7818aa7034e8aca154a7439229a028f5959 fix(editor): render code blocks when lowlight highlightAuto returns empty tree (#3358)
- e55f050b84c86ef1e8c70033662a09182a965687 fix(i18n): clean up zh-Hans translation inconsistencies (#3308)
- bed032f937d6eef79e4d6dda647f02143886f575 fix(issues): move local-directory hint out of the comment composer (#3363)
- b343e13ec42d070eccb34f758109c0f9fd0f0459 fix(settings): remove orphan repo count from GitHub tab shortcut card (#3342)
- 730fb61f4a42939453b6a5cb82b8daa2469a5c6d fix(views): keep sort label centered in viewport during board scroll (#3325)
- 26ff52385b88ee564460d6a00fd2bc9cae5be84c fix: attribute Hermes usage to current model (MUL-2696)
- bdb60acae91eca9caeb564a7e6c1681b18e3a20a fix: swimlane empty lanes in due to pagination (MUL-2724) (#3326)
- e3723dbb22f71a4b48badf84b9df4179d63d6ac9 refactor(autopilot): centralize timezone default and cover invalid-timezone fallback (MUL-2742) (#3356)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About multica
The open-source managed agents platform. Turn coding agents into real teammates — assign tasks, track progress, compound skills.
Related context
Related tools
Earlier breaking changes
- v0.3.8 Removes custom_env from agent resources, adds audited env endpoint (MUL-2600)
Beta — feedback welcome: [email protected]