This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Summary
AI summaryTask state transitions preserve destination files across platforms and forbidden paths cannot be bypassed by changing case.
Full changelog
This patch release improves cross-platform task-state reliability and protected-path enforcement.
Highlights
- Task state transitions preserve existing destination files across supported filesystems and long Windows paths.
scope.forbidden_pathscannot be bypassed by changing path casing, such assecretstoSecrets.- Task JSON now round-trips
loop_budgetvalues correctly. - Daemon status rejects unsupported output formats, and executor cancellation is classified consistently on Windows.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Galley
Local-first runtime for supervised AI coding tasks: isolated git worktrees, supervisor review against acceptance criteria, retry/escalate loops, on-disk run evidence, and PR handoff. Supports Codex CLI and Claude Code. Go, MIT.
Related context
Related tools
Beta — feedback welcome: [email protected]