v2026.9.11 v4.22.3
NousResearch/hermes-agentSep 11, 2026 → Sep 14, 20262 days between releases
What's New
Hermes fixes state.db reliability; Express patches CVE-2026-4867.
New Features
- Conditional revalidation for QUERY requests
Improvements
- Security fix for CVE-2026-4867 in path-to-regexp
- Dependency update: qs to version 6.16.0
- CI enhancements: npm staged publication with dist-tag support
Upgrade Notes
Update path-to-regexp and qs libraries to patch a security vulnerability. The new conditional revalidation feature for QUERY requests is available but requires configuration.
The Two Releases
Hermes Agent v0.21.2 (v2026.9.11)
Sep 11, 2026· 1 month ago
This patch release (v0.21.2) addresses critical reliability issues in the `state.db` introduced in v0.21.0, specifically fixing concurrent writer conflicts and corrupt database reporting. It introduces new features like a password-blind credential vault and a curated plugin catalog, alongside significant hardening of multi-profile isolation.
Full release notesv4.22.3
Sep 14, 2026· 1 month ago
This release addresses a security vulnerability in the `path-to-regexp` dependency and introduces a new feature for conditional revalidation of QUERY requests. It also includes updates to the `qs` library and improvements to the CI pipeline.
Full release notes