Skip to content

zeroshot

v5.4.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-loops agent-orchestration agentic-workflow ai-agent ai-agents autonomous-agents
+10 more
claude cli codex coding-assistant developer-tools gemini loop-engineering meta-harness multi-agent vibecoding

Affected surfaces

auth

Summary

AI summary

Updates Bug Fixes, https://github.com/covibes/zeroshot/issues/60, and https://github.com/covibes/zeroshot/issues/2 across a mixed release.

Full changelog

5.4.0 (2026-01-18)

Bug Fixes

  • add spawn timeout to prevent infinite hang when provider CLI hangs (57f145f)
  • adversarial-tester: close CANNOT_VALIDATE abuse loopholes (e3bdf31)
  • conductor: add negative examples to prevent false CRITICAL classifications (#85) (6101fa4)
  • hooks: escape template patterns in substituted values (8cf4938), closes #60
  • metrics: poll for real PID from task store (#92) (6afda6d)
  • orchestrator cluster_id and Codex git repo check (#88) (05f224c)
  • orchestrator cluster_id and Codex git repo check (#90) (bace190)
  • output-parser: handle text blocks in assistant messages for Haiku (#65) (3b54e67), closes #52
  • pid: fetch real Claude process PID from tasks.json after spawn (c829bb8)
  • prevent infinite hang when provider CLI hangs (opencode 429 bug) (3305da8)
  • prompts: add generalization check, use generic context files (#94) (2469f92)
  • spawn: disconnect IPC channel to allow parent process exit (e89241d)
  • validators: enforce actual execution with testResults schema (3431dff)
  • validators: skip CANNOT_VALIDATE criteria on retry iterations (a3c5de3)

Features

  • Add Claude API key management and authentication (#62) (cf142c8)
  • adversarial-tester: add DI/architectural testing guidance (#86) (7bf8f02)
  • adversarial-tester: add verification fallback strategy (#87) (861b052)
  • ci: enforce merge queue workflow for dev branch (#67) (d353466)
  • commands: add /analyze command for cluster debugging (fc3b01e)
  • hooks: add conditional topic publishing via hook logic scripts (c052b52), closes #60 #60
  • List episodes chronologically (#78) (8b64f55), closes #2
  • List episodes chronologically (#81) (618e21c), closes #2
  • prompts: compress validator prompts 3x smaller, OUTPUT FORMAT at end (#91) (b6a13ae)
  • providers: add multi-provider issue support with git auto-detection (#82) (a99b209), closes #61
  • validation: add CANNOT_VALIDATE status for impossible verification steps (2151e7f)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track zeroshot

Get notified when new releases ship.

Sign up free

About zeroshot

Your autonomous engineering team in a CLI. The agent loop produces senior-level code that you can actually trust in prod because of non-negotiable feedback from independent reviewers. Supports Claude Code, OpenAI Codex, OpenCode, and Gemini CLI with trivial setup.

All releases →

Related context

Beta — feedback welcome: [email protected]