Hermes merged 59 PRs on October 21 The ones worth knowing: • MCP servers can now declare tool costs and a per-chat spend limit, and the approval prompt shows you what a call will cost • Big plugin catalog day: Meshy, bubblewrap, Singularity/Apptainer, inbox, workflow-record and cua-spaces all landed as plugins • hermes import-agent and the MCP server mode are moving out of core into official plugins, and the importer now handles Cursor • Terminal command output no longer disappears when a process has more than 1024 open file descriptors • You can set up the gateway's Webapp straight from Desktop settings • Installs and updates fall back to the Nous mirror when a tool's download host is down • hermes update on a damaged .git no longer leaves paused gateways stopped, and tells you how to repair it • Stable releases publish their Docker image again • Google connector results in context now route Nous requests to no-training endpoints • 18 dependency security bumps, including critical fixes for simple-git, tinypool and certifi • WhatsApp can be safely re-paired from the dashboard after logout • Desktop drops the suggestion pills above the composer and stops killing the gateway on quit Here is the full list: DESKTOP IMPROVEMENTS (8 PRs) • feat(desktop): set up the gateway's Webapp from desktop settings • Desktop bundle builds survive slow R2 reads (Pre-build setup timeout 5 → 30 min) • Desktop plugin lint stops flagging prototype writes; review reads them by hand • fix(desktop): keep the approval-mode chip on the active profile mode • Desktop no longer shows suggestion pills above the composer • Desktop's stale-gateway restart no longer leaves the gateway as an app child that gets killed and blocks quit • Install/update desktop legs keep the mock reachable across steps and launch Windows checkpoints outside the runner's job • fix(install-e2e): desktop smoke accepts the canonical gateway Desktop attaches to DEVELOPER TOOLS & PLUGINS (16 PRs) • MCP servers can declare tool costs and a per-chat spend limit; the approval prompt shows them • MCP servers see hermes-agent and its release in the handshake clientInfo • feat(mcp-catalog): add RentAHuman hosted MCP • feat(pm): pm update can skip a lagging target, and failed pins name their URL • fix(plugins): a plugin declaring no dependencies skips the empty consent step and enables • Meshy joins the plugin catalog as an official plugin • Meshy catalog entry picks up in-place animations and image-saving fixes • plugin-catalog: cua-spaces 0.4.0 • plugin-catalog: add bubblewrap (official bwrap terminal backend, Linux) • plugin-catalog: add mcp-serve (official; Hermes as an MCP server leaving core) • plugin-catalog: add agent-importers (hermes import-agent leaves core, adds Cursor) • plugin-catalog: add singularity (official Singularity/Apptainer terminal backend) • plugin-catalog: add inbox (hermes inbox, Hermes Labs) • Catalog: add workflow-record (hermes record, Hermes Labs) • Catalog: Telegram Business moves to hermes-labs-plugins (community tier) • docs: fix dead anchors and orphaned guides, sync zh-Hans skill catalogs, add 25 user stories SECURITY & SECRETS (18 PRs) • fix(deps): bump simple-git 3.36.0 → 4.0.2 (critical, GHSA-x6jw-m9v5-85vh) • fix(deps): bump tinypool 1.1.1 → 2.2.0 (critical, GHSA-85c8-ppgw-ccpr) • fix(deps): bump certifi 2026.5.20 → 2026.10.19 (critical, GHSA-6q48-6c7w-9gw2) • fix(deps): bump browserslist → 4.29.3 (high, GHSA-c83g-rgw3-j3cx) • fix(deps): bump nanoid 3.x to 3.3.20 (high, GHSA-2v37-7h3g-55p8) • fix(deps): bump @ xmldom/xmldom 0.8.13 → 0.8.15, 0.9.10 → 0.9.12 (high) • fix(deps): bump follow-redirects 1.16.0 → 1.16.1 (high, GHSA-q3jh-wrc6-jgq8) • fix(deps): bump vite 8.2.0 → 8.2.4 (high, GHSA-587h-7wmj-h5pm) • fix(deps): bump aiohttp 3.14.3 → 3.14.5 (high, GHSA-9xw5-w5jj-pvcg) • fix(deps): bump svgo 3.3.4 → 3.3.5 in website (high, GHSA-w27v-7q3p-w38r) • fix(deps): bump js-yaml 4.3.1 → 4.3.2 in website (high, GHSA-2883-xcg3-v3hh) • fix(deps): bump launch-editor 2.14.1 → 2.14.2 in website (high, GHSA-587h-7wmj-h5pm) • fix(deps): bump postcss-selector-parser → 7.1.6 (medium, GHSA-rj75-hqrm-r3gf) • fix(deps): bump oauthlib 3.3.1 → 4.0.0 (medium, GHSA-xpv3-w29h-x7cv) • fix(deps): bump sanitize-html 2.17.7 → 2.18.1 (medium, GHSA-cv27-6wvh-8x7j) • fix(deps): bump qs 6.15.3 → 6.16.0 in website (medium, GHSA-4mjr-xmp4-gh2g) • fix(deps): bump colord 2.9.3 → 2.10.0 in website (medium, GHSA-2wm5-q62r-hmrv) • fix(deps): bump katex 0.16.47 → 0.18.4 (low, GHSA-238p-pmpm-9mq7) INTEGRATIONS & CHAT (2 PRs) • Google connector results in context route Nous requests to no-training endpoints • fix(dashboard): allow safe WhatsApp re-pairing after logout STABILITY & FIXES (15 PRs) • fix(terminal): command output no longer vanishes above 1024 open fds • hermes update on a damaged .git no longer leaves paused gateways stopped, and names the repair • Installs and updates fall back to the Nous mirror when a tool's download host is down • fix(gateway): a starting gateway never shows clients a half-written control pointer • fix(gateway): stamp an unproven --replace refusal startup_failed so the next start wins • SessionDB startup no longer reports a vanished WAL sidecar as read-only • fix(state): stop offering the ~60% FTS rebuild to stores that already ran it • fix: a refused skill_manage write reads neutral on the CLI, Desktop and answer-only mode • feat(shared-metrics): offer two consent answers, drop collect-only • Stable releases publish their Docker image again (manifest-list jobs back on GitHub runners) • Stable releases publish their Docker image again (buildx pin no longer falls back to v0.23.0) • feat(ci): pin docker buildx version to v0.31.8 • ci: run registry-side imagetools jobs on current buildx • Release install/update tests run on GitHub runners again • Termux assembly test no longer turns main red when the container daemon hangs 59 new features and fixes