Hermes merged 48 PRs on October 22
The ones worth knowing:
• Delegation is now pluggable: pick a backend (default, model map, or profiles), and Desktop gets a settings screen with a mode picker, model route editor and profile routes
• Advanced delegation lands in the official plugin catalog
• Desktop is on Electron 44.9.3 without breaking fresh Windows installs
• Drag sessions in the Desktop sidebar to pin or unpin them
• Installing from Desktop is simpler: install with +, switch once installed, and tier badges show on the install dialog
• Desktop group chats show which bot is working again
• Fresh installs get their onboarding and free trial back, and the trial now runs cron and Kanban
• Long answers from streaming process providers like Claude DirectSDK no longer get cut off by the stall timer
• API turns that hit the iteration budget stop reporting "cancelled", and rate limited retries no longer look like loops
• A chat whose working folder is gone now says so instead of "model request failed"
• Edge TTS works again after a bump that clears its 403
• Core gets leaner: Singularity, hermes mcp serve, and agent import plus OpenClaw migration move out into plugins
Here is the full list:
DESKTOP IMPROVEMENTS (11 PRs)
• feat(desktop): delegation settings: mode picker, model-route editor, profile routes
• feat(desktop): install with +, switch once installed; tier badges on the install dialog
• feat(desktop): drag sessions to pin / unpin in the sidebar
• fix(desktop): upgrade to Electron 44.9.3 without breaking fresh Windows installs
• fix(desktop): app sounds mute toggle, None chime, silent OS notifications
• fix(desktop): give a fresh install its onboarding and free trial again
• fix(desktop): show a setup answer once after a failed onboarding turn
• fix(desktop): keep terminal instructions off the provider picker
• refactor(desktop): delete what only the Desktop's own hermes serve reached
• Desktop group chats show which bot is working again
• Desktop update and core E2E pass again after the Electron 44 upgrade
VOICE & REAL-TIME (1 PR)
• fix(tts): bump edge-tts 7.2.7 to 7.3.1 to clear the Edge TTS 403
DEVELOPER TOOLS & PLUGINS (17 PRs)
• feat(delegation): pluggable delegation backends (default, model map, profiles)
• refactor(delegation): the default delegation strategy is a bundled plugin
• feat(mcp): webhook-mode MCP events client (experimental)
• catalog: add advanced-delegation (official)
• catalog: re-pin advanced-delegation to fec72bd (official)
• plugin-catalog: advanced-delegation card image + re-pin to b3825d0
• plugin-catalog: re-pin agent-importers to b5932f1
• plugin-catalog: re-pin agent-importers (OpenClaw migration moved in)
• plugin-catalog: re-pin agent-importers (a fresh home no longer blocks the OpenClaw import)
• Meshy catalog entry re-pinned to meshy-mcp-server 0.6.5 (Hermes named in Meshy's User-Agent)
• refactor(terminal): the Singularity backend leaves core for the singularity plugin
• refactor(cli): hermes mcp serve leaves core for the mcp-serve plugin
• refactor(cli): hermes import-agent and OpenClaw migration leave core; setup offers to import from a found agent
• fix(pm): a plugin whose pyproject installs nothing no longer rebuilds the dependency environment
• ci: show cache hits and misses in the review comment
• chore(deps): bump vitest to 4.1.12
• update uv & node, pin nix to same versions.
SECURITY & SECRETS (1 PR)
• fix(deps): bump webpack-dev-middleware 7.4.5 to 7.4.6 (high, GHSA-g84c-rxfj-3j2c)
INTEGRATIONS & CHAT (6 PRs)
• feat: usage-window plan support
• fix(gateway): serve onboarding on the session authority
• fix(gateway): keep the error description on failed session-authority turns
• fix(onboarding): review follow-ups: the trial runs cron and Kanban, reconnects keep their chat
• fix(dashboard): toolset and channel edits validate in the target profile
• A chat whose working folder is gone says so, instead of "model request failed"
STABILITY & FIXES (12 PRs)
• Long answers from streaming process providers (Claude DirectSDK) no longer get cancelled by the stall timer
• API turns that hit the iteration budget no longer report "cancelled", and rate-limited retries no longer read as loops
• fix(terminal): background launches on non-local backends report real failures and honour workdir
• fix: uv resolution works again on newest uv
• fix: drop vestigial requirements.txt
• Stable installs on the gateway runtime are held at their build, not offered or refused v0.22.2
• Windows update from v0.22.4 publishes the new launcher and stamp across the Python repin
• Windows install + update E2E fits the runner's disk again: journeys delete their install at teardown
• Upgrade E2E builds the pre-handoff updater env from the lock again after the Pillow 13 override
• chore(deps): bump opentelemetry to 1.45.1 and mistralai to 2.10.1
• chore: update base debian images to 2026-10-20
• test(pm): downloader connection-limit tests no longer count a finished request as concurrent (CI flake)
48 new features and fixes
Show more
Hermes merged 59 PRs on October 21
The ones worth knowing:
• MCP servers can now declare tool costs and a per-chat spend limit, and the approval prompt shows you what a call will cost
• Big plugin catalog day: Meshy, bubblewrap, Singularity/Apptainer, inbox, workflow-record and cua-spaces all landed as plugins
• hermes import-agent and the MCP server mode are moving out of core into official plugins, and the importer now handles Cursor
• Terminal command output no longer disappears when a process has more than 1024 open file descriptors
• You can set up the gateway's Webapp straight from Desktop settings
• Installs and updates fall back to the Nous mirror when a tool's download host is down
• hermes update on a damaged .git no longer leaves paused gateways stopped, and tells you how to repair it
• Stable releases publish their Docker image again
• Google connector results in context now route Nous requests to no-training endpoints
• 18 dependency security bumps, including critical fixes for simple-git, tinypool and certifi
• WhatsApp can be safely re-paired from the dashboard after logout
• Desktop drops the suggestion pills above the composer and stops killing the gateway on quit
Here is the full list:
DESKTOP IMPROVEMENTS (8 PRs)
• feat(desktop): set up the gateway's Webapp from desktop settings
• Desktop bundle builds survive slow R2 reads (Pre-build setup timeout 5 → 30 min)
• Desktop plugin lint stops flagging prototype writes; review reads them by hand
• fix(desktop): keep the approval-mode chip on the active profile mode
• Desktop no longer shows suggestion pills above the composer
• Desktop's stale-gateway restart no longer leaves the gateway as an app child that gets killed and blocks quit
• Install/update desktop legs keep the mock reachable across steps and launch Windows checkpoints outside the runner's job
• fix(install-e2e): desktop smoke accepts the canonical gateway Desktop attaches to
DEVELOPER TOOLS & PLUGINS (16 PRs)
• MCP servers can declare tool costs and a per-chat spend limit; the approval prompt shows them
• MCP servers see hermes-agent and its release in the handshake clientInfo
• feat(mcp-catalog): add RentAHuman hosted MCP
• feat(pm): pm update can skip a lagging target, and failed pins name their URL
• fix(plugins): a plugin declaring no dependencies skips the empty consent step and enables
• Meshy joins the plugin catalog as an official plugin
• Meshy catalog entry picks up in-place animations and image-saving fixes
• plugin-catalog: cua-spaces 0.4.0
• plugin-catalog: add bubblewrap (official bwrap terminal backend, Linux)
• plugin-catalog: add mcp-serve (official; Hermes as an MCP server leaving core)
• plugin-catalog: add agent-importers (hermes import-agent leaves core, adds Cursor)
• plugin-catalog: add singularity (official Singularity/Apptainer terminal backend)
• plugin-catalog: add inbox (hermes inbox, Hermes Labs)
• Catalog: add workflow-record (hermes record, Hermes Labs)
• Catalog: Telegram Business moves to hermes-labs-plugins (community tier)
• docs: fix dead anchors and orphaned guides, sync zh-Hans skill catalogs, add 25 user stories
SECURITY & SECRETS (18 PRs)
• fix(deps): bump simple-git 3.36.0 → 4.0.2 (critical, GHSA-x6jw-m9v5-85vh)
• fix(deps): bump tinypool 1.1.1 → 2.2.0 (critical, GHSA-85c8-ppgw-ccpr)
• fix(deps): bump certifi 2026.5.20 → 2026.10.19 (critical, GHSA-6q48-6c7w-9gw2)
• fix(deps): bump browserslist → 4.29.3 (high, GHSA-c83g-rgw3-j3cx)
• fix(deps): bump nanoid 3.x to 3.3.20 (high, GHSA-2v37-7h3g-55p8)
• fix(deps): bump @ xmldom/xmldom 0.8.13 → 0.8.15, 0.9.10 → 0.9.12 (high)
• fix(deps): bump follow-redirects 1.16.0 → 1.16.1 (high, GHSA-q3jh-wrc6-jgq8)
• fix(deps): bump vite 8.2.0 → 8.2.4 (high, GHSA-587h-7wmj-h5pm)
• fix(deps): bump aiohttp 3.14.3 → 3.14.5 (high, GHSA-9xw5-w5jj-pvcg)
• fix(deps): bump svgo 3.3.4 → 3.3.5 in website (high, GHSA-w27v-7q3p-w38r)
• fix(deps): bump js-yaml 4.3.1 → 4.3.2 in website (high, GHSA-2883-xcg3-v3hh)
• fix(deps): bump launch-editor 2.14.1 → 2.14.2 in website (high, GHSA-587h-7wmj-h5pm)
• fix(deps): bump postcss-selector-parser → 7.1.6 (medium, GHSA-rj75-hqrm-r3gf)
• fix(deps): bump oauthlib 3.3.1 → 4.0.0 (medium, GHSA-xpv3-w29h-x7cv)
• fix(deps): bump sanitize-html 2.17.7 → 2.18.1 (medium, GHSA-cv27-6wvh-8x7j)
• fix(deps): bump qs 6.15.3 → 6.16.0 in website (medium, GHSA-4mjr-xmp4-gh2g)
• fix(deps): bump colord 2.9.3 → 2.10.0 in website (medium, GHSA-2wm5-q62r-hmrv)
• fix(deps): bump katex 0.16.47 → 0.18.4 (low, GHSA-238p-pmpm-9mq7)
INTEGRATIONS & CHAT (2 PRs)
• Google connector results in context route Nous requests to no-training endpoints
• fix(dashboard): allow safe WhatsApp re-pairing after logout
STABILITY & FIXES (15 PRs)
• fix(terminal): command output no longer vanishes above 1024 open fds
• hermes update on a damaged .git no longer leaves paused gateways stopped, and names the repair
• Installs and updates fall back to the Nous mirror when a tool's download host is down
• fix(gateway): a starting gateway never shows clients a half-written control pointer
• fix(gateway): stamp an unproven --replace refusal startup_failed so the next start wins
• SessionDB startup no longer reports a vanished WAL sidecar as read-only
• fix(state): stop offering the ~60% FTS rebuild to stores that already ran it
• fix: a refused skill_manage write reads neutral on the CLI, Desktop and answer-only mode
• feat(shared-metrics): offer two consent answers, drop collect-only
• Stable releases publish their Docker image again (manifest-list jobs back on GitHub runners)
• Stable releases publish their Docker image again (buildx pin no longer falls back to v0.23.0)
• feat(ci): pin docker buildx version to v0.31.8
• ci: run registry-side imagetools jobs on current buildx
• Release install/update tests run on GitHub runners again
• Termux assembly test no longer turns main red when the container daemon hangs
59 new features and fixes
Show more