v2026.8.31 v2.11.57
medium risk
ace-step/ACE-Step-1.5Aug 31, 2026 → Sep 4, 20264 days between releases
What's New
Security-focused update disabling recursive NSS propagation and blocking opaque request targets
Breaking Changes
- Blocked requests with opaque request targets
- Disabled recursive nameserver propagation for DNS challenges by default
New Features
- Enhanced DNS challenge security
- Stricter request validation
Improvements
- Updated HTTP/3 and QUIC libraries to v0.62.0
- Dedicated transport per HTTP/3 client connection
Bug Fixes
- Disabled recursive nss propagation for DNS challenge
- Denied requests with opaque request targets
- Stopped forwarding h2c upgrade headers to backend
Upgrade Notes
Please read the migration guide. Three CVEs were fixed, including GHSA-qqjf-53cj-pwvv and GHSA-f52w-8j3h-j724.
The Two Releases
v2026.8.31
Hermes Agent v0.21.0 (v2026.8.31)
Aug 31, 2026· 2 months ago
The Pantheon Release introducing Bot Mode as a bundled desktop feature, peer-to-peer bot communication, memoryful cron jobs, and a unified MCP command center.
Full release notesv2.11.57
v2.11.57
Sep 4, 2026· 2 months ago
A security-focused update for the v2.11 branch that disables recursive NSS propagation and blocks opaque request targets.
Full release notes