From e3c85624d982b6c5b3c5790dbdb24efc7c37c84a Mon Sep 17 00:00:00 2001 From: nesquena-hermes Date: Fri, 10 Apr 2026 01:10:02 -0700 Subject: [PATCH] =?UTF-8?q?docs:=20v0.43.0=20release=20=E2=80=94=20auto-in?= =?UTF-8?q?stall=20agent=20deps,=20session=20ID=20validator,=20test=20suit?= =?UTF-8?q?e=20isolation=20fix=20(571=20tests)=20(#217)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Nathan Esquenazi --- CHANGELOG.md | 9 +++++++++ static/index.html | 2 +- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 79218b7..6613a4d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,15 @@ --- +## [v0.43.0] — 2026-04-10 + +### Features +- **Auto-install agent dependencies on startup** (PRs #215 + #216): When `hermes-agent` is found on disk but its Python dependencies are missing (common in Docker deployments where the agent is volume-mounted post-build), `server.py` now calls `api/startup.auto_install_agent_deps()` to install from `requirements.txt` or `pyproject.toml`. Falls back gracefully — failures are logged and never fatal. + +### Bug Fixes +- **Session ID validator broadened** (PR #212): `Session.load()` rejected any session ID containing non-hex characters, breaking sessions created by the new hermes-agent format (`YYYYMMDD_HHMMSS_xxxxxx`). Validator now accepts `[0-9a-z_]` while rejecting path traversal patterns (null bytes, slashes, backslashes, dot-extensions). +- **Test suite isolation** (PR #216): `conftest.py` now kills any stale process on the test port (8788) before starting the fixture server. Stale QA harness servers (8792/8793) could occupy 8788 and cause non-deterministic test failures across the full suite. + ## [v0.42.2] — 2026-04-10 ### Bug Fixes diff --git a/static/index.html b/static/index.html index d4fb02e..d5c5e9c 100644 --- a/static/index.html +++ b/static/index.html @@ -14,7 +14,7 @@