Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-09-05 · source-backed
Released September 5, one day after 1.4.1, it fixes a variable-collision bug where nested var declarations got renamed to collide with a let in the same block, emitting var exports2 = exports2; and breaking Elysia builds with a shadowing SyntaxError. It also fixes an AsyncLocalStorage leak where timers, immediates or promises created inside store.exit() or a nested store.run() kept outer store values alive, and a worker_threads 'online' ordering bug that hung @discordjs/ws (Bun Blog).
Each link below shares sources, entities, or timing with this story.
Released September 3, spanning 294k to 2.2m parameters with 11 voices across 6 languages, claiming 244x smaller than Kokoro. The 1.51m Amy model scores SCOREQ 4.13 against Inflect Nano's 3.81 at 4.63m and KittenTTS's 3.02 at 15m, with about 2% WER through Whisper. On an ESP32...
Released September 2, per-subagent model, provider and reasoning-effort selection sits behind an experimental setting (#13557), so an orchestrator routes cheap subtasks to a small model without changing the parent session. Read this against the Fable 5.1 cost story above: per-...
Released September 3, PR #2206 confines storage names against directory traversal, confines symlink targets to configured storage directories, requires API keys for non-loopback server bindings, authenticates the Ollama routes, and defaults the REST server to loopback port 808...
Released September 3, listed as a bug fix, with an explicit "Allow Self-Signed Certificates" toggle for people who need the old behavior. Which means every WebDAV backup this desktop client made before 2.0.11 went out without certificate validation. Same release adds a per-ass...
Released September 1, leading its notes with cosign verification for ghcr.io/berriai/litellm, recommending verification against the public key at pinned commit 0112e53 because a commit hash is cryptographically immutable, with tag-based verification offered as the weaker optio...
Released September 3, the release refuses to let its AUTO-mode permission classifier decide on any out-of-workspace write, and separately forwards bounded MCP tool arguments and server annotations to that classifier so decisions rest on more than tool names. It authenticates c...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.