v0.10.1 v2026.09.22

high risk

vectorize-io/hindsightSep 21, 2026 → Sep 21, 20260 days between releases

What's New

Migrates JSONPath evaluation to RFC 9535 and restricts legacy method calls for security.

Breaking Changes

  • Migration to RFC 9535 changes evaluation behavior.
  • Legacy evaluation requires a compatibility flag.

New Features

  • JSONPath security guard restricts legacy method calls.
  • RFC 9535 JSONPath evaluation support.
  • Allowlist mechanism for legacy JSONPath methods.

Improvements

  • Database migration with conservative compatibility checks.
  • Security hardening for JSONPath expressions.

Upgrade Notes

The database migration converts expressions only when compatibility is established. Agents with uncertain expressions retain original paths and require `use_legacy_jsonpath: true`. Review affected Agent URLs before removing the compatibility flag.

The Two Releases

v0.10.1

v0.10.1

Sep 21, 2026· 1 month ago

A maintenance release addressing bugs in attachments, OAuth, mental models, and the coding agents. It adds administrative tools like `hindsight-admin rename-bank` and improves server-side time filtering capabilities.

Full release notes
v2026.09.22

v2026.09.22

Sep 21, 2026· 1 month ago

A security and compatibility update that restricts legacy JSONPath method calls and migrates evaluation to RFC 9535 by default.

Full release notes