This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryFixed startup crash when a CWD .env contains undefined keys by ignoring extra settings.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Fixes startup crash when .env contains undefined keys Fixes startup crash when .env contains undefined keys Source: llm_adapter@2026-06-11 Confidence: high |
— |
Full changelog
Bug fix
Fixed a startup crash when running openhack from a directory containing a .env file with keys the scanner doesn't define.
Because openhack scans arbitrary target repositories, a target's .env could carry unrelated keys (e.g. gemini_sandbox_proxy_command). pydantic-settings defaults to extra="forbid" and validates every key found in a CWD .env file, so any unknown key aborted the CLI before it started with:
pydantic_core.ValidationError: 1 validation error for Settings
gemini_sandbox_proxy_command
Extra inputs are not permitted [type=extra_forbidden]
The value was never executed — it only tripped settings validation. Setting extra="ignore" makes openhack skip unrelated keys in a CWD .env (or environment), matching how unknown environment variables were already handled.
Upgrade: pip install --upgrade openhack
Full diff: https://github.com/openhackai/OpenHack/compare/v0.1.1...v0.1.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About OpenHack
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]