This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryBroad release touches agents, issues, desktop, and chat.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Add SMTP_FROM_EMAIL for SMTP sender configuration. Add SMTP_FROM_EMAIL for SMTP sender configuration. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Low |
Make autopilot webhook admission durable. Make autopilot webhook admission durable. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Low |
Add machine‑level batch task claim endpoint. Add machine‑level batch task claim endpoint. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Low |
Add DevEco Code runtime agent. Add DevEco Code runtime agent. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Low |
Add automatic update preference to desktop client. Add automatic update preference to desktop client. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Performance | Low |
Make daemon workspace sync event‑driven. Make daemon workspace sync event‑driven. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Performance | Low |
De‑amplify per‑row agent activity indicator in issues view. De‑amplify per‑row agent activity indicator in issues view. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Medium |
Fix public host root redirect. Fix public host root redirect. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Fix Hermes bound-skill discovery with per-task overlay. Fix Hermes bound-skill discovery with per-task overlay. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Restore Autopilot webhook response contract. Restore Autopilot webhook response contract. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Low |
Select an offered ACP permission option so Hermes writes aren't denied. Select an offered ACP permission option so Hermes writes aren't denied. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Always enable skill toggles for agents. Always enable skill toggles for agents. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Gate agents list first paint on sort/filter dependencies. Gate agents list first paint on sort/filter dependencies. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Show runtime alias and provider consistently for agents. Show runtime alias and provider consistently for agents. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Parse compound cron fields as custom in autopilot trigger editor. Parse compound cron fields as custom in autopilot trigger editor. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Badge unread chat replies that arrive while backgrounded. Badge unread chat replies that arrive while backgrounded. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Reland archived-session unread handling and mount‑race auto‑read fix. Reland archived-session unread handling and mount‑race auto‑read fix. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Recover daemon executable path in CLI. Recover daemon executable path in CLI. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Self‑heal pinned agent executable path after in‑place upgrade. Self‑heal pinned agent executable path after in‑place upgrade. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Wake queued tasks after predecessor exits. Wake queued tasks after predecessor exits. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Open mention/slash popup upward and clamp height to viewport. Open mention/slash popup upward and clamp height to viewport. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Bugfix | Low |
Renumber webhook delivery migrations. Renumber webhook delivery migrations. Source: granite4.1:30b@2026-07-14-audit Confidence: low |
— |
| Refactor | Low |
Revert virtualization of inbox/list/board/swimlane performance change. Revert virtualization of inbox/list/board/swimlane performance change. Source: llm_adapter@2026-07-14 Confidence: high |
— |
Full changelog
Changelog
- e1d0d68c53db0232993a504d1983e191eb6c472f Fix public host root redirect (#5363)
- ef9b334408789964e3f3be3746433905aaa27f56 MUL-4398: fix Hermes bound-skill discovery with per-task overlay (#5308)
- 5b57a8ebcae6decda639d75f91c7eb6040710eb4 MUL-4460: fix(email): add SMTP_FROM_EMAIL for SMTP sender
- ac62f72c2a1cdb1f481f530e7dd75d13289a7afe MUL-4480: make daemon workspace sync event-driven (#5354)
- e07b5403ab9d2e1622baa0ca688ca76a8b0494ed MUL-4502: make autopilot webhook admission durable (#5386)
- 6b4d69066497aec6a9f3257c84bc5f2b98bfa5fe MUL-4744: restore Autopilot webhook response contract (#5397)
- c3dd9ec84546e7180ffc58cb4e967d1a52c784ba Machine-level batch task claim endpoint (MUL-4257) (#5193)
- c10bfa8f56c484642a6c250d1b96a4aeff464a57 Revert "perf(issues): virtualize inbox/list/board/swimlane (MUL-4474, 方案2) (#…" (#5395)
- ebca1c191403b681364759a953c1cca8e6343555 docs(changelog): add 0.4.1 release notes (en/zh/ja/ko) (#5394)
- c27919a4d090c045174e00dfe4f98e9883b6b1ec feat(agents): add DevEco Code (deveco) runtime agent (MUL-4050) (#4916)
- 2d13b26fcc17b8a4e8139cbe038c5f19c9e5a663 feat(desktop): add automatic update preference (#5380)
- 7a1a2a9de4195659ed1ffcbc4722dcb38a464346 fix(agent): select an offered ACP permission option so Hermes writes aren't denied (MUL-4441) (#5351)
- 6c6143e8fcaa1bf3754dafb5ff5373a0b24a9900 fix(agents): always enable skill toggles (MUL-4520) (#5381)
- dc0c8afb98c1007d5c069ac59fdb31def17fc9e6 fix(agents): gate agents list first paint on sort/filter deps (MUL-4511) (#5377)
- e565a4559abbc8fd3c515e51581faff9afc00d5e fix(agents): show runtime alias + provider consistently (#5260) (#5340)
- 39474ee3aa31abea02a669b22f09d31301687c84 fix(autopilots): parse compound cron fields as custom in trigger editor (#5302)
- ace0f16cadad582bf0708a1aa694cec6b307590f fix(chat): badge unread chat replies that arrive while backgrounded (MUL-4485) (#5356)
- 47f9c5813f3e0bd2c24923c35103b7d095c7e5ad fix(chat): reland archived-session unread + mount-race auto-read (MUL-4360) (#5333)
- a91a390d48313956e93e751bb20e6e4d2c176c07 fix(cli): recover daemon executable path (MUL-4514)
- 34d5445007a7d059ed720675fca747ae8435af79 fix(daemon): self-heal pinned agent executable path after in-place upgrade (MUL-4486) (#5355)
- af9d90bd837fcd56d8d57821e745d292cdfb36da fix(daemon): wake queued tasks after predecessor exits (#5379)
- b9faa27a671db626c1bb6baae6b145d0a693e791 fix(editor): open mention/slash popup upward and clamp height to viewport (#5376)
- 8614b198165e5f9cfe69e3ee5bd5fc4791a37f38 fix(migrations): renumber webhook delivery migrations
- 3a493ab417b36f5dfacf1231cf2d8ca5db697063 perf(issues): de-amplify per-row agent activity indicator (MUL-4474) (#5338)
- 40da795f6cdb8ddfe684faadb2d748c9a1c1b98d perf(issues): virtualize inbox/list/board/swimlane (MUL-4474, 方案2) (#5349)
- de98b7cb833ba00225d5ea786d908ddbb4f60e2e test(desktop): stabilize updater preference test against slow-disk race (#5392)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About multica
The open-source managed agents platform. Turn coding agents into real teammates — assign tasks, track progress, compound skills.
Related context
Related tools
Earlier breaking changes
- v0.3.8 Removes custom_env from agent resources, adds audited env endpoint (MUL-2600)
Beta — feedback welcome: [email protected]