This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+1 more
Summary
AI summarys9pk init-workspace now clones the full monorepo and repoints a dangling AGENTS.md symlink.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
`s9pk init-workspace` clones the full monorepo, not just the guide, using `--filter=blob:none` for a cheap checkout. `s9pk init-workspace` clones the full monorepo, not just the guide, using `--filter=blob:none` for a cheap checkout. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
`init-workspace` can use an existing `start-technologies` directory when symlinked into the workspace. `init-workspace` can use an existing `start-technologies` directory when symlinked into the workspace. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
`s9pk init-workspace` links `AGENTS.md` to the guide's Agent Context page in `projects/start-sdk/docs/src/agent-context.md`. `s9pk init-workspace` links `AGENTS.md` to the guide's Agent Context page in `projects/start-sdk/docs/src/agent-context.md`. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Scaffolded `AGENTS.local.md` now explains what content belongs in it, detailing box, registry, packages, and layout deviations. Scaffolded `AGENTS.local.md` now explains what content belongs in it, detailing box, registry, packages, and layout deviations. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
`init-workspace` repoints a dangling `AGENTS.md` symlink to the correct path. `init-workspace` repoints a dangling `AGENTS.md` symlink to the correct path. Source: llm_adapter@2026-07-16 Confidence: high |
— |
Full changelog
What's Changed
Changed
s9pk init-workspaceclones the whole monorepo, not just the guide. The checkout is no
longer sparse or shallow, so a packager has the SDK and StartOS source on hand when the guide
can't settle a question — and a repo they can open a fix PR from.--filter=blob:nonekeeps it
cheap: a few seconds and roughly 75 MB, withgit log,blame, and rebase all working normally.
An existing workspace keeps its narrow checkout. Widen it in place by running
sparse-checkout disableinstart-technologies/, plusfetch --unshallowif you want history.init-workspaceuses an existingstart-technologiesif you point at one. Symlink it into
the workspace before running, and the clone is skipped.s9pk init-workspacelinksAGENTS.mdto the guide's Agent Context page. The workspace
context file moved toprojects/start-sdk/docs/src/agent-context.md, so it publishes with the
rest of the packaging guide instead of being reachable only by scaffolding a workspace or
browsing the monorepo. Astart-technologies/that is a symlink to a monorepo checkout you
maintain yourself is now a supported layout, and the guide says so.- The scaffolded
AGENTS.local.mdexplains what belongs in it. The stub now names the split:
your box, your registry, your packages, and any departure from the scaffolded layout go there,
while anything that would help every packager belongs upstream in the guide.
Fixed
init-workspacerepoints a workspaceAGENTS.mdleft over from an earlier release. Those
symlinks target a path that no longer exists; re-runninginit-workspacein such a workspace
replaces the dangling link. Everything else it finds is still left untouched.
start-cli Checksums
SHA-256
563709da61ef1a72460e1d25f51a6f930d61565d97f255dc591d0029013931eb start-cli_aarch64-linux
d6762248804cdcc9f0cfb0afc09769118b8a130a8d07983bd8aaf66815e1401f start-cli_aarch64-macos
a29f0fb17a2c9f7f45565113252183736d419de211353d0e677008125f07228a start-cli_riscv64-linux
eb04a6368e09bcfd8b89812ece8244a2fdf1f0161ee03a1dc1cbaee6ff564b23 start-cli_x86_64-linux
b1e331c79cef93703ed44f1af4cdb50b5a6bb853564fa295d6d0a95d1dd936f1 start-cli_x86_64-macos
BLAKE-3
b56b37ebf7cec53b18035eeddd53f118324d42342afbc2939d3b4d2045847fb8 start-cli_aarch64-linux
458c6cddd1f49c544e5bc04ef9613271745a53dbb2d0555b35e4d64ffa00f3c2 start-cli_aarch64-macos
34fe7a982b7f4edeefd9d8485f52b9bd4af627526acf844757d0e8d43528e135 start-cli_riscv64-linux
582eab44923a80c69373c9453e4b0f1a63731eeeced4b9ccde6cac5b9ddb24d2 start-cli_x86_64-linux
dc5a1b625e6ebdd9200c19dde64684f38b334b0629061c64aac9c9bcb6d44121 start-cli_x86_64-macos
start-cli packages Checksums
SHA-256
311a3374b5da3230558c8206f37850022e24c99f19cb7258b826422d4e88437a start-cli-1.0.2-d1e8373_aarch64.deb
9e5ff5594bb1550e6c0d371475bd49ca09b948fb388d3265ba2ac76ab9a29c62 start-cli-1.0.2-d1e8373_riscv64.deb
afe5026eef204550b3f12e849cc58f8534cd82dadebfae40c82f474677a3b636 start-cli-1.0.2-d1e8373_x86_64.deb
BLAKE-3
1a067ea50fa896dfef22aba5d9bc4d2879988a17edafd3b0434724708e1feb95 start-cli-1.0.2-d1e8373_aarch64.deb
ee9b48b4b99fc106b73062365a860ccc6a59ca67e5f1ba5a49439a72c89635d8 start-cli-1.0.2-d1e8373_riscv64.deb
aa30f5fa307512b1cb13cf346e7e2cba1994f47b3467807bccda512f722a25c5 start-cli-1.0.2-d1e8373_x86_64.deb
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About StartOS
Browser-based, graphical Operating System (OS) that makes running a personal server as easy as running a personal computer.
Related context
Related tools
Earlier breaking changes
- vstart-sdk/v2.0.4 'setupMain' callback now accepts any DaemonBuildable rather than requiring a Daemons.
- vstart-sdk/v2.0.4 `Daemons.dynamic` now takes `effects` and returns a `DaemonReconciler` instead of replacing `main`.
- v0.4.0-beta.9 Previous backups incompatible with v0.4.0; create fresh backup after updating.
Beta — feedback welcome: [email protected]