sidpalas/deputies

v0.10.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agents ai control-plane development

Affected surfaces

auth deps

ReleasePort's take

Moderate signal

editorial:auto 1mo

Version v0.10.0 introduces timing‑safe generic webhook authentication and several performance‑related paging changes.

Why it matters: The security fact (severity 80) adds timing‑safe webhook auth, directly reducing risk of authentication bypass attacks.

Summary

AI summary

Updates Continuous Integration, Chores, and Bug Fixes across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Uses timing‑safe generic webhook authentication. Uses timing‑safe generic webhook authentication. Source: llm_adapter@2026-06-12 Confidence: high	—
Feature	Medium	Adds configuration for Daytona sandbox resources. Adds configuration for Daytona sandbox resources. Source: llm_adapter@2026-06-12 Confidence: high	—
Feature	Medium	Adds Deputies preview support inside sandboxes. Adds Deputies preview support inside sandboxes. Source: llm_adapter@2026-06-12 Confidence: high	—
Dependency	Low	Upgrades flue runtime to version 0.11.1. Upgrades flue runtime to version 0.11.1. Source: llm_adapter@2026-06-12 Confidence: high	—
Performance	Medium	Pages global event listing for performance. Pages global event listing for performance. Source: llm_adapter@2026-06-12 Confidence: high	—
Performance	Medium	Pages session event replay for performance. Pages session event replay for performance. Source: llm_adapter@2026-06-12 Confidence: high	—
Bugfix
Bugfix	Medium	Clears high‑dependency audit advisories. Clears high‑dependency audit advisories. Source: llm_adapter@2026-06-12 Confidence: high	—
Bugfix	Medium	Finalizes stale runs with no recoverable messages. Finalizes stale runs with no recoverable messages. Source: llm_adapter@2026-06-12 Confidence: high	—
Bugfix	Medium	Preserves early events for new web sessions. Preserves early events for new web sessions. Source: llm_adapter@2026-06-12 Confidence: high	—
Bugfix	Low	Removes stale patches copy from docker image. Removes stale patches copy from docker image. Source: llm_adapter@2026-06-12 Confidence: high	—

Full changelog

0.10.0 (2026-06-12)

Continuous Integration

add deployment smoke workflow (668f333)
make compose smoke script executable (92f9e36)
match release please commit scope (c5b386d)
skip tests on release commits (2c7273e)

Features

control-plane: compact finalized text deltas (#61) (1de90fb)
control-plane: configure daytona sandbox resources (b89d2a7)
control-plane: support Deputies previews inside sandboxes (#63) (f53050b)

Bug Fixes

control-plane: clear high dependency audit advisories (86ad0d5)
control-plane: finalize stale runs with no recoverable messages (b1a8b00)
control-plane: use timing-safe generic webhook auth (ad21838)
docker: remove stale patches copy (9c08b79)
sandbox-bridge: harden preview proxy failures (a3e8fd6)
web: preserve early events for new sessions (#65) (ae1dbd1)

Chores

add eslint baseline (fd46fe0)
align repo housekeeping docs and vitest (9ce53b5)
control-plane: upgrade flue runtime to 0.11.1 (8c379cf)
fix eslint baseline violations (28573f6)

Documentation

clarify flue session fresh-start impact (ddf29e4)
harden inner app preview runbook (42ca671)
update implementation plan statuses (01d7dea)

Performance Improvements

control-plane: page global event listing (4454a5f)
control-plane: page session event replay (f036c76)

Code Refactoring

control-plane: segregate store interfaces (70be981)
web: extract access groups admin hook (6a8695d)

Tests

control-plane: add cross-group access matrix (2883cf4)
web: make responsive e2e api mocks origin agnostic (7f46408)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track sidpalas/deputies

Get notified when new releases ship.

About sidpalas/deputies

All releases →

Related context

Related tools

Earlier breaking changes

v0.5.0 Removed RUNNER_MODEL env var; use RUNNER_MODEL_DEFAULT instead.
v0.5.0 Removed AUTH_GITHUB_ADMIN_ORGANIZATIONS, AUTH_GITHUB_VIEWER_USERS, AUTH_GITHUB_VIEWER_ORGANIZATIONS, UNSAFE_AUTH_GITHUB_ALLOW_ALL_VIEWERS env vars.
v0.4.0 Replace Flue-specific runtime config names with runner-oriented names.