v4.22.3 v2026.9.14

medium risk

NousResearch/hermes-agentSep 14, 2026 → Sep 14, 20260 days between releases

What's New

Patch release adds HEIF/HEIC support and fixes session expiration bugs in remote deployments

New Features

  • Desktop now supports decoding HEIF/HEIC/AVIF image formats
  • OpenRouter OAuth PKCE login is now supported
  • JSON-RPC server-to-client requests and Pydantic wire-contract registry are added
  • Reasoning effort selection controls are added to model pickers and composer pills
  • Support for Slack pasted tables and the Agent Sessions API

Improvements

  • Identity provider latency is reduced by offloading refresh operations to the event loop
  • Multiplexed-profile isolation and gateway-liveness improvements
  • Gateway, dashboard, and CLI readers now share registry handles to prevent leaks

Bug Fixes

  • Remote dashboard sessions no longer expire on refresh bursts due to concurrent token rotation issues
  • Long-lived processes and gateway components stop leaking duplicate state.db writer handles

Upgrade Notes

Ensure your Desktop client supports the new HEIF/HEIC/AVIF image formats and OpenRouter OAuth PKCE login. The session expiration fix is automatic, but multiplexed-profile isolation may require configuration updates for existing deployments.

The Two Releases

v4.22.3

v4.22.3

Sep 14, 2026· 1 month ago

This release addresses a security vulnerability in the `path-to-regexp` dependency and introduces a new feature for conditional revalidation of QUERY requests. It also includes updates to the `qs` library and improvements to the CI pipeline.

Full release notes
v2026.9.14

Hermes Agent v0.21.3 (v2026.9.14)

Sep 14, 2026· 1 month ago

This is a patch release (v0.21.3) that stabilizes remote Desktop and Cloud deployments by fixing session expiration bugs related to refresh token rotation and resolving state database handle leaks in long-running processes.

Full release notes