hermes-agent 2026.5.7#281437
Merged
Merged
Conversation
github-actions
Bot
added
python
botantony
force-pushed
the
bump-hermes-agent-2026.5.7
branch
from
c8c2bad to
3ae664c
Compare
p-linnane
approved these changes
May 7, 2026
Contributor
|
🤖 An automated task has requested bottles to be published to this PR. Caution Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch. |
github-actions
Bot
added
the
CI-published-bottle-commits
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Created by
brew bumpCreated with
brew bump-formula-pr.resourceblocks have been checked for updates.release notes
Multi-agent Kanban — delegate to an AI team that actually finishes — Spin up a durable board, drop tasks on it, and let multiple Hermes workers pick them up, hand off, and close them out. Heartbeats, reclaim, zombie detection, retry budgets, and a hallucination gate keep the team honest. One install, many kanbans. (#17805, #19653, #20232, #20332, #21330, #21183, #21214)
/goal— the agent doesn't forget what you asked it to do — Lock the agent onto a target and it stays on task across turns. The Ralph loop as a first-class primitive. (#18262, #18275, #21287)Show it a video — new
video_analyzetool for native video understanding on Gemini and compatible multimodal models. (@alt-glitch) (#19301)Clone a voice — xAI Custom Voices lands as a TTS provider with voice cloning support. (@alt-glitch) (#18776)
Hermes speaks your language — static gateway + CLI messages translate to 7 locales: Chinese, Japanese, German, Spanish, French, Ukrainian, and Turkish. Docs site gains a Chinese (zh-Hans) locale. (#20231, #20329, #20467, #20474, #20430, #20431)
Google Chat — the 20th messaging platform — plus a generic platform-plugin hooks surface so third-party adapters drop in without touching core (IRC and Teams migrated). (#21306, #21331)
Sessions survive restarts — gateway bounces mid-agent,
/updaterestarts, source-file reloads — conversations auto-resume when the gateway comes back. (#21192)Security wave — 8 P0 closures — redaction ON by default, Discord role-allowlists guild-scoped (CVSS 8.1 cross-guild DM bypass closed), WhatsApp rejects strangers by default, TOCTOU windows closed across
auth.jsonand MCP OAuth, browser enforces cloud-metadata SSRF floor, cron prompt-injection scans assembled skill content,hermes debug shareredacts at upload. (#21193, #21241, #21291, #21176, #21194, #21228, #21350, #19318)Checkpoints v2 — state persistence rewritten. Real pruning, disk guardrails, no more orphan shadow repos. (#20709)
The agent lints its own writes — post-write delta lint on
write_file+patch. Python, JSON, YAML, TOML. Syntax errors surface immediately instead of shipping downstream. (#20191)no_agentcron mode — script-only watchdog — cron jobs can now skip the agent entirely and just run a script. Empty stdout is silent, non-empty gets delivered verbatim. (#19709)Platform allowlists everywhere —
allowed_channels/allowed_chats/allowed_roomsconfig across Slack, Telegram, Mattermost, Matrix, and DingTalk. (#21251)Providers are now plugins —
ProviderProfileABC +plugins/model-providers/. Drop in third-party providers without touching core. (#20324)API server — long-term memory per session —
X-Hermes-Session-Keyheader gives memory providers a stable session identifier. (#20199)MCP levels up — SSE transport with OAuth forwarding, stale-pipe retries, image results surface as MEDIA tags instead of getting dropped, keepalive on long-lived lifecycle waits. (#21227, #21323, #21289, #21328, #20209)
Curator grows subcommands —
hermes curator archive,prune,list-archived. Manualhermes curator runis synchronous now — you see results without polling. (#20200, #21236, #21216)ACP —
/steerand/queue— direct the in-flight agent or queue follow-ups from Zed, VS Code, or JetBrains. Plus atomic session persistence and reasoning-metadata preservation across restarts. (@HenkDz) (#18114, #20279, #20296, #20433)TUI glow-up —
/modelpicker matcheshermes modelwith inline auth (@austinpickett), collapsible startup banner sections (@kshitijk4poor), context-compression counter in the status bar. (#18117, #20625, #21218)Dashboard grows up — Plugins page (manage, enable/disable, auth status) (@austinpickett), Profiles management page (@vincez-hms-coder), sortable analytics tables, reverse-proxy support via
X-Forwarded-Prefix, newdefault-large18px theme. (#18095, #16419, #18192, #21296, #20820)SearXNG + split web tools — SearXNG ships as a native search-only backend; web tools now let you pick different backends per capability (search vs extract vs browse). (@kshitijk4poor) (#20823, #20061, #20841)
OpenRouter response caching — explicit cache control for models that expose it. (@kshitijk4poor) (#19132)
[[as_document]]— skill media-routing directive — skills can force the gateway to deliver output as a document on platforms that support it. (#21210)transform_llm_outputplugin hook — new lifecycle hook that lets plugins reshape or filter LLM output before it hits the conversation. Useful for context-window reducers and content filters. (#21235)Nous OAuth persists across profiles — shared token store: sign in once, every profile inherits the session. (#19712)
QQBot — native approval keyboards — feature parity with Telegram / Discord approval UX. Chunked upload, quoted attachments. (#21342, #21353)
6 new optional skills — Shopify (Admin + Storefront GraphQL), here.now, shop-app personal shopping assistant, Anthropic financial-services bundle, kanban-video-orchestrator (@SHL0MS), searxng-search (@kshitijk4poor). (#18116, #18170, #20702, #21180, #19281, #20841)
New models —
deepseek/deepseek-v4-pro,x-ai/grok-4.3,openrouter/owl-alpha(free),tencent/hy3-preview(@Contentment003111), Arcee Trinity Large Thinking temperature + compression overrides. (#20495, #20497, #18071, #21077, #20473)100 fresh CLI startup tips — the random tip banner gets 100 new entries covering cron, kanban, curator, plugins, and lesser-known flags. (#20168)
🧩 Multi-Agent Kanban (Durable)
New — durable multi-profile collaboration board
feat(kanban): durable multi-profile collaboration board— post-revert reimplementation, multi-profile by design (#17805)max_retriesoverride (supersedes #20972) (#21330)Kanban Dashboard
<code>background inside dashboard board (#20687)Worker lifecycle + reliability
Batch salvages
Documentation
/kanbanslash command (#19584)🎯 Persistent Goals, Checkpoints & Session Durability
/goal— persistent cross-turn goals (Ralph loop)feat: /goal — persistent cross-turn goals(#18262)Checkpoints v2
Session durability
🛡️ Security & Reliability
Security hardening (8 P0 closures)
DISCORD_ALLOWED_ROLESto originating guild (#12136, CVSS 8.1) (#21241)hermes_cli/auth.py— close TOCTOU window in credential writers (#21194)hermes debug share— redact log content at upload time (@GodsBoy) (#19318)Reliability — critical bug closures
Invalid key 'c-S-c'(P0, prompt_toolkit doesn't support Shift modifier) (#19895, #19919)hermes mcp addsilently launches chat instead of registering MCP server (#19785) (#21204)/newduring active agent session never sends response on Telegram (#18912)📱 Messaging Platforms (Gateway)
New platform
env_enablement_fn/cron_deliver_env_varplatform-plugin hooks (IRC + Teams migrated) (#21306, #21331)Cross-platform
allowed_{channels,chats,rooms}whitelist — Slack (salvage #7401), Telegram, Mattermost, Matrix, DingTalk (#21251)gateway_restart_notificationflag (#20892)busy_ack_enabledconfig — suppress ack messages (#18194)[[as_document]]directive — skill media routing (salvage #19069) (#21210)hermes gateway list— cross-profile status (salvage #19129) (#21225)config.yamlwins over.envfor agent/display/timezone settings (#18764)require_mentionto Telegram config (#19429)reply_to_modefrom config.yaml for Discord + Telegram (salvage #17117) (#20171)thread_id=1for forum General typing indicator (#21390)Telegram
Discord
free_response_channelsto overrideDISCORD_IGNORE_NO_MENTION(#19629)Slack
WhatsApp
Feishu
Matrix + Email
/sethomeon Matrix and Email now persists across restarts (#18272)Teams
Weixin
QQBot
🏗️ Core Agent & Architecture
Provider & Model Support
Pluggable providers
plugins/model-providers/— inference providers are now a pluggable surface (salvage of #14424) (#20324)list_picker_providers— credential-filtered picker (salvage #13561) (#20298)/provideralias for/model(#20358)New models
deepseek/deepseek-v4-proadded to OpenRouter + Nous Portal (#20495)x-ai/grok-4.3added to OpenRouter + Nous Portal (#20497)openrouter/owl-alpha(free tier) added to curated OpenRouter list (#18071)tencent/hy3-previewpaid route on OpenRouter (@Contentment003111) (#21077)x-ai/grok-4.20-betatox-ai/grok-4.20(#19640)Provider configuration
image_gen.modelfrom config.yaml honored (salvage #19376) (#21273)Agent Loop & Conversation
video_analyze— native video understanding tool (@alt-glitch) (#19301)get_tool_definitionsquiet_mode cache + dedup LCM injection (#17335) (#17889)View the full release notes at https://github.com/NousResearch/hermes-agent/releases/tag/v2026.5.7.