Policy dependency / Stack layer
Cherry Studio v2.0.9 unifies tool approval into one declarative policy and lets the provider catalog hot-update without an app release
GitHub
Policy dependency / Threat pattern
Weaviate v1.39.2 makes its MCP server stateless and refuses GET with a 405
GitHub
Stack layer / Contrast
CopilotKit shipped three tags in six days including a same-day Python SDK release, at 37,068 stars
GitHub
Stack layer / Contrast
Cline v4.1.16 fixes hooks resolving from global state, and starts redacting credentials embedded in git remote URLs before they reach the model
GitHub (cline/cline)
Stack layer / Contrast
Gradient open-sources a full reinforcement-learning loop for training tool-using research agents with GRPO
GitHub
Policy dependency / Stack layer
Halofy ships an open governance layer for agents with identity, policy, provenance, audit and signed erasure
GitHub
Policy dependency / Stack layer
OmniRoute broke a 27-day release silence with v3.8.50 on August 26 and maintains a rolling provider-catalog export tag
GitHub
Threat pattern / Update thread
HolmesGPT 0.40.0 is almost entirely a security release: command injection across five toolsets, SSRF, and signed bash approval prefixes
GitHub