This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+5 more
Affected surfaces
Summary
AI summaryFixed mobile remote auto‑update behavior to require user interaction before connecting to the relay.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Prevents background remote auto-updates from auto‑connecting to the relay without user action. Prevents background remote auto-updates from auto‑connecting to the relay without user action. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Restores plugin config‑change notifications after normal settings updates. Restores plugin config‑change notifications after normal settings updates. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Rewrites agent config for telemetry only after explicit setup consent. Rewrites agent config for telemetry only after explicit setup consent. Source: llm_adapter@2026-06-11 Confidence: low |
— |
| Refactor | Low |
Removes dead stats broadcasting and cleans up shared helper code for ask, agents, presets, ANSI stripping, and Claude session IDs. Removes dead stats broadcasting and cleans up shared helper code for ask, agents, presets, ANSI stripping, and Claude session IDs. Source: llm_adapter@2026-06-11 Confidence: high |
— |
Full changelog
- fixed mobile remote auto-update so background updates do not auto-connect to the relay unless the user opens remote
- made telemetry setup safer by only rewriting agent config after explicit setup consent
- fixed plugin config-change notifications after normal settings updates
- removed dead stats broadcasting and cleaned up shared helper code for ask, agents, presets, ansi stripping, and Claude session ids
Security Fixes
- Telemetry config rewriting now only occurs after explicit user consent
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About CliDeck
WhatsApp-like browser dashboard for managing multiple CLI coding agents (Claude Code, Codex, Gemini CLI, OpenCode) with live status detection, session resume, autopilot routing, and full control from a phone while away. MIT.
Related context
Related tools
Beta — feedback welcome: [email protected]