This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+9 more
Affected surfaces
ReleasePort's take
Moderate signalv4.1.2 excludes hidden agents from task delegation discovery, closing a bypass vulnerability. Race-condition fixes improve /ralph-loop stability.
Why it matters: Update immediately if you use task delegation with hidden agents or /ralph-loop commands. Race-condition fixes prevent stability-related failures in both systems.
Summary
AI summaryHidden agents are now excluded from task delegation, fixing a bypass vulnerability.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Race-condition fixes in /ralph-loop command improve stability. Race-condition fixes in /ralph-loop command improve stability. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Fallback system guards against duplicate prompt injections. Fallback system guards against duplicate prompt injections. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Hidden agents now excluded from task delegation discovery. Hidden agents now excluded from task delegation discovery. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Platform lock entries synchronized. Platform lock entries synchronized. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Non-interactive Windows sessions honor ComSpec shell. Non-interactive Windows sessions honor ComSpec shell. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
Busy-parent notifications deferred to reduce spam. Busy-parent notifications deferred to reduce spam. Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
🛡️ Reliability & Compatibility Patch
This patch release tightens edge cases across agent delegation, loop stability, and platform compatibility.
🔒 Safer Agent Delegation
Hidden agents are now correctly excluded from task delegation discovery. Previously, agents marked as hidden could still be selected by the delegate-task system, causing unexpected behavior. This closes the bypass for good.
🪟 Windows Shell Fixes
Non-interactive sessions now properly detect and use the Windows command shell (ComSpec), fixing execution failures on Windows systems where the default shell wasn't being respected.
🔄 Ralph Loop Hardening
Two race-condition fixes make the /ralph-loop command more stable: compaction ownership is now guarded so overlapping continuation events can't hijack the loop, and delayed-start snapshots are properly isolated to prevent state leakage.
🤖 Background Agent & Fallback Polishing
Busy-parent notifications from background tasks are now deferred instead of firing immediately, reducing notification spam. The fallback system also guards against duplicate prompt injections that could occur under specific retry conditions.
Minor Compatibility and Stability Release
This release carries compatibility-facing behavior changes and operational hardening. Read the summary below before upgrading or publishing.
- Rename transition updates across package detection, plugin/config compatibility, and install surfaces.
- Task and tool behavior updates, including delegate-task contract and runtime registration behavior.
- Install and publish workflow hardening, including safer release sequencing and package/install fixes.
Commit Summary
- 9a1f8f67 fix(web): route installation links to docs section
- 63ced1d2 Merge pull request #4010 from code-yeongyu/chore/safe-tooling-upgrades-biome-tsgo-20260514-132516
- 96d72495 Merge pull request #4009 from code-yeongyu/fix/ralph-loop-compaction-race
- f10251b5 chore(tooling): refresh safe deps and checks
- 9e618526 fix(ralph-loop): guard compaction continuation ownership
- 72bac14a @clousky2020 has signed the CLA in code-yeongyu/oh-my-openagent#4005
- d16d47a0 docs: complete v4.1.1 drift sweep in reference and guide docs
- 98242ba6 docs(i18n+web): align translated READMEs and landing copy with v4.1.1 hook count
- 8cc3c320 docs: refresh user-facing docs to match v4.1.1 codebase
- 1e7a7600 docs(agents-md): regenerate hierarchical AGENTS.md knowledge base for v4.1.1
- 5ffbe0e2 fix(fallback): guard duplicate prompt injections
- ea55c385 fix(background-agent): defer busy parent notifications
- 6e841773 @PeterPonyu has signed the CLA in code-yeongyu/oh-my-openagent#3871
- f9b95f9e Merge pull request #3993 from code-yeongyu/fix/non-interactive-env-windows-shell
- 43b2d0e0 Merge pull request #3992 from MoerAI/fix/omo-block-native-execution-delegation
- 47d60a74 fix(non-interactive-env): honor Windows ComSpec shell
- 95cc9e2d [sisyphus-dev] fix(delegate-task): canonicalize agent dedup key to close hidden filter bypass
- fef1d453 fix(non-interactive-env): respect Windows command shell
- cab20568 fix(deps): sync platform lock entries
- 4bd81d2c fix(delegate-task): exclude hidden agents from task delegation discovery (fixes #3957)
- 61ba4e3b fix(ralph-loop): guard delayed start snapshots
- 1fa97c6e docs(publish): require discord announcement
Thank you to 1 community contributor:
- @MoerAI:
- fix(delegate-task): exclude hidden agents from task delegation discovery (fixes #3957)
Security Fixes
- Delegate‑task system now excludes hidden agents, closing bypass vulnerability (fix #3957)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
Beta — feedback welcome: [email protected]