This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
ReleasePort's take
Light signalVersion v0.3.16 introduces Lark Bot integration with migration changes and several usability fixes across chat, editor, and email components.
Why it matters: Addresses a severity‑40 bug that previously dropped every debounced user message in chat; all teams relying on reliable chat delivery should upgrade immediately.
Summary
AI summaryAdds Lark Bot integration, chat context picker and agent picker, editor markdown checkboxes, lark debouncing/enrichment fixes, email EHLO hostname handling, sidebar stale pin hiding, and refactors server/lark gate.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds Lark Bot integration MVP with migration and service boundary changes. Adds Lark Bot integration MVP with migration and service boundary changes. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds markdown checkbox task list support in editor. Adds markdown checkbox task list support in editor. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds explicit context picker to chat. Adds explicit context picker to chat. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds searchable agent picker to chat. Adds searchable agent picker to chat. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Debounces inbound run trigger per chat session for Lark Bot. Debounces inbound run trigger per chat session for Lark Bot. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds inbound context enrichment for Lark Bot with post/merge_forward/quoted-reply handling. Adds inbound context enrichment for Lark Bot with post/merge_forward/quoted-reply handling. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Propagates SMTP_EHLO_NAME through self‑host configuration and updates related documentation. Propagates SMTP_EHLO_NAME through self‑host configuration and updates related documentation. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes delivery of every debounced user message to the agent in chat. Fixes delivery of every debounced user message to the agent in chat. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fixes download of attachments without opening a blank web tab in editor. Fixes download of attachments without opening a blank web tab in editor. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fixes SMTP EHLO hostname setting for relay compatibility. Fixes SMTP EHLO hostname setting for relay compatibility. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fixes wiring of SMTP_EHLO_NAME through self‑host config and updates docs. Fixes wiring of SMTP_EHLO_NAME through self‑host config and updates docs. Source: llm_adapter@2026-06-04 Confidence: low |
— |
| Bugfix | Low |
Hardens business sampler quality in metrics. Hardens business sampler quality in metrics. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
Full changelog
Changelog
- 8c98940b797e4cc98ea458ab473b0d8002300a15 Lark Bot integration MVP: migration + service boundary (MUL-2671) (#3277)
- 0d38288dbd2ab92b41336e9bca1fc4976dfa0ab4 MUL-2926 feat(editor): support markdown checkbox task lists (#3593) (#3657)
- 945d684afd981e178fa2ed23ef59e00d53fc9080 MUL-2965 fix(metrics): harden business sampler quality (#3738)
- 7fdec9e6e4b377ab59da04481668ece8444cd6d7 Teach default PR handoff in issue skill (#3753)
- b92c3fbc93480c60ee9cc74b4d5c64ae62f3fade chore(analytics): stop shipping operational events to PostHog (MUL-2967) (#3720)
- 82e9ca401c58b617ae988675a8ca535b3959f053 docs(i18n): backfill SMTP relay TLS docs for ja/ko parity (#3750)
- d98fc85088a70d90e9a3097b6e8d2f0b272ec7ea feat(agents): Integrations tab with Lark Bot bind entry + Lark Bot docs (MUL-2988) (#3751)
- 2840ebb308f9cd5f4e885f9e8d9d6859091e0cd9 feat(chat): add explicit context picker (#3735)
- aaefa53ea7f8c2de1cc2cbd4886d102212a4f9ec feat(chat): add searchable agent picker (#3709)
- 6e004149a8d9ef69a26112090d93acea9892d0b9 feat(lark): debounce inbound run trigger per chat session (MUL-2968) (#3742)
- 5eba94ee2517cd505449f3a392c9f8772f19ab13 feat(lark): inbound context enrichment — post / merge_forward / quoted-reply (MUL-2951) (#3724)
- 1544e3b68ad5d11418c00194a88c691910a494b3 feat(skills): built-in agent skills (WIP) MUL-2759 (#3456)
- c99c2493ae4184e0759669328ef7824d6fe64603 fix(agent): keep resolvable models when CLI discovery exits non-zero
- ae27058b0a5f95457524eca2d96619a517e8b56a fix(attachments): unified download endpoint with mode + presign + proxy (MUL-2976) (#3747)
- 9beb45b55bcb696ce3273f60a5564300b661ae88 fix(chat): deliver every debounced user message to the agent (MUL-2968) (#3744)
- 5e1a6c48537f1101fa887e838c074d3022170865 fix(cli): degrade 'issue metadata list' to {} on /metadata 404 (#3757)
- a1a33f91dbc89c8156651a4a346b4c2f3193cc96 fix(desktop): surface expired login instead of silently stuck "Starting" daemon (MUL-2973) (#3743)
- 569b43136c8bf2a89b7a85dde566a005473ad897 fix(editor): download attachments without blank web tab (#3752)
- a9f0739b52d52c6ca9cf08f45dfaa282e71415f5 fix(email): set EHLO hostname for SMTP relay compatibility (#3679)
- 8db619c1cdafca33f36fe1becd3b548377e7a2d5 fix(email): wire SMTP_EHLO_NAME through self-host config + docs [MUL-2984] (#3749)
- d6a556bdbf3ad525591480b526d9c02f8b43542b fix(execenv): refresh skills in place on reuse instead of accumulating duplicate dirs (#3716)
- 6330286c7ecf02a33d51b97731dc74f5ec2407ba fix(lark): use named import for react-qr-code to survive electron-vite interop (#3718)
- 49c913a4fa70fe1e8028f5ab8cb62ab21cf3dd1d fix(sidebar): hide stale pinned items immediately on workspace switch (MUL-2985) (#3564)
- 26971e7e4503e9372938ee0ab7444b3aa86e85fc fix(views): left-align picker item rows (#3736)
- b9334dd59f4bd7e7037788c3625ff2846638a7f7 fix: anchor comment triggers to thread roots (#3746)
- b0d479c6e79a7a40d0edb2cfe8739c044775a41f fix: use mentions for chat context (#3755)
- 598a6c51f294be23cc10c5a8d71051b40ff60097 refactor(server/lark): collapse HTTP_ENABLED + WS_ENABLED into the SECRET_KEY gate (MUL-2671) (#3717)
Breaking Changes
- refactor(server/lark): collapse HTTP_ENABLED + WS_ENABLED into the SECRET_KEY gate (MUL-2671)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About multica
The open-source managed agents platform. Turn coding agents into real teammates — assign tasks, track progress, compound skills.
Related context
Related tools
Earlier breaking changes
- v0.3.8 Removes custom_env from agent resources, adds audited env endpoint (MUL-2600)
Beta — feedback welcome: [email protected]