v3.8.48 v0.8.3

high risk

bespokelabsai/nimbleJul 13, 2026 → Jul 16, 20262 days between releases

What's New

Major architectural overhaul introducing SOP engine, WebAssembly plugin host, and Git forge channel with Tauri desktop app.

Breaking Changes

  • Desktop app architecture changed from Electron to Tauri sidecar
  • New SOP engine requires workflow configuration changes
  • WebAssembly plugin host introduces new execution environment

New Features

  • End-to-end SOP engine with triggers and approval planes
  • WebAssembly plugin host using wasmtime component model
  • Git forge channel supporting GitHub and Gitea/Forgejo
  • Self-contained desktop app with Tauri sidecar
  • Task-attributed usage ledger for cost tracking

Improvements

  • Cost & usage accounting with offline pricing catalog
  • Improved daemon maintenance tick for live procedures
  • Broad security hardening including SSRF and path-traversal fixes

Bug Fixes

  • Fixed SSRF vulnerabilities
  • Fixed signing-key leak prevention
  • Fixed path-traversal issues
  • Fixed dependency vulnerabilities via dependency bumps
  • Fixed constant-time token comparison

Upgrade Notes

Upgrading requires significant configuration changes due to the new SOP engine and WebAssembly plugin host. The desktop application architecture has shifted from Electron to a Tauri sidecar, which may require updates to local development environments. Review the new Git forge channel configuration and task-attributed usage ledger settings.

The Two Releases

v3.8.48

v3.8.48

Jul 13, 2026· 3 months ago

A hotfix release that fixes a crashing npm package from v3.8.47 and ships the v3.8.47 cycle features, including the Langfuse plugin and combo budget fallbacks.

Full release notes
v0.8.3

v0.8.3

Jul 16, 2026· 3 months ago

A large consolidation cycle focused on the new SOP engine, WebAssembly plugin host, Git forge channel, and broad security hardening.

Full release notes