The agent that
grows with you

• ▸ *Release Date:** October 11, 2026
• ▸ *What this patch ships for source installs (hermes update and the desktop app's updater on a git checkout):**
• ▸ **Updates now follow tagged releases.** A source install of the official repository updates to the latest published vX.Y.Z release instead of every commit on main. An install already newer than the latest release stays where it is and waits for the next one; nothing is moved back. To keep following every commit: hermes update --set-channel main. Forks and mirrors keep following main. Store, MSIX and bundled desktop installs are unchanged.
• ▸ **Choose the channel in the desktop app.** Settings ▸ About ▸ Updates has an *Update channel* switch (Stable releases / Every commit) for source installs, and the update dialog now shows which channel you are on.
• ▸ **Reasoning survives resume.** Signed thinking replays after hermes chat --resume and on the next gateway turn, and Bedrock Converse reasoning models no longer get rejected on resumed sessions.

Hermes Agent v0.21.7

Release Date: October 11, 2026

> Patch release. This tag rolls up the ~204 PRs merged since v0.21.6 into a stable release for the desktop app (macOS Apple silicon, Windows), the Microsoft Store and MSIX, the installer, Docker and Hermes Cloud. Full curated notes for this window ship with v0.22.0.

<!-- HERMES_BUILDS_TABLE -->

What this patch ships for source installs (hermes update and the desktop app's updater on a git checkout):

• Updates now follow tagged releases. A source install of the official repository updates to the latest published vX.Y.Z release instead of every commit on main. An install already newer than the latest release stays where it is and waits for the next one; nothing is moved back. To keep following every commit: hermes update --set-channel main. Forks and mirrors keep following main. Store, MSIX and bundled desktop installs are unchanged.


• Choose the channel in the desktop app. Settings ▸ About ▸ Updates has an *Update channel* switch (Stable releases / Every commit) for source installs, and the update dialog now shows which channel you are on.


• Reasoning survives resume. Signed thinking replays after hermes chat --resume and on the next gateway turn, and Bedrock Converse reasoning models no longer get rejected on resumed sessions.


• Updates no longer fail behind some firewalls. Installs on main no longer fetch a release record that regional firewalls could answer with 403. The stable check uses your GitHub token when one is set (GITHUB_TOKEN or gh auth login) and reports a GitHub rate limit as a rate limit.

About this release

Measured at commit 1fd18277267152893a8a24792b79213e7ca3f899, the window since v0.21.6 contains 740 non-merge commits across 4,156 changed files (+86,775 / −26,980), 204 merged PRs and 69 closed issues.

Also in the window, undocumented here on purpose: plugins running built-in Desktop app actions (ctx.runAction) and a plugin SDK pet bubble (ctx.pet.say); core-made Codex requests so plugins never hold the token; skills installed mid-session reaching the model without a prompt rebuild; Krea 2 Medium Turbo as the default image lane for new paid subscribers, with a FAL fallback when managed Krea refuses a request; faster desktop updates (the React Compiler pass cached by content, the compiled renderer reused when only the install stamp changed, unchanged native inputs left in place); pinned installs that check out only the pin; compaction marks emitted to Relay; and new community plugins including memory-shield, command-ledger, Memoria, Model Router, wyoming-voice-bridge, codex-account-switch and redline.

Full curated release notes for this window ship with v0.22.0, which will document everything from v0.21.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

• Desktop app: updates itself. Microsoft Store installs update through the Store.


• CLI: hermes update, or re-run the installer one-liner.


• Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: [v0.21.6...v0.21.7](https://github.com/NousResearch/hermes-agent/compare/v0.21.6...v0.21.7)

Hermes Agent v0.21.6

Release Date: October 8, 2026

> Patch release. This tag rolls up the ~2,100 PRs merged since v0.21.5 into a stable tagged release for Docker and Hermes Cloud. Full curated notes for this window ship with v0.22.0.

<!-- HERMES_BUILDS_TABLE -->

About this release

This is the first release cut by the new stable release pipeline: one attempt ref, a tested Docker image, and a receipt tag at publish. It ships the tag, this GitHub release and the Docker image. The desktop app, Termux packages and the Microsoft Store stay on their current build for now and move with the next bundled release.

Measured at commit 818c13be1dc4fd28987e1e881a9408224afd4535, the window since v0.21.5 contains 8,867 non-merge commits across 8,342 changed files (+772,490 / −225,600), 2,106 merged PRs and 3,027 closed issues.

Also in the window, undocumented here on purpose: live transcription while you speak on CLI, TUI and Desktop (stt.streaming); spoken voice turns routed to their own model (auxiliary.voice_chat) with reasoning off by default; third-party plugins running in a per-profile plugin host (plugins.isolation: host) and one Settings ▸ Plugins home for their settings pages; favorite and pinned models at the top of the Desktop picker, a usage chip before a subscription hits its wall, and rate-limited providers that say why and until when; local models in hermes model plus llama.cpp CUDA on Linux x64 and arm64; pluggable, layered language packs across core, Desktop and TUI; a summary-first hermes status (--short, --full); a review-pane diff scope selector (Uncommitted / Branch / Last turn) and keep-awake that follows the turn; cron, doctor and home-channel warnings when the cron store goes unwritable; approval flags for credential uploads and invisible Unicode in terminal commands; a Discord setup that checks the bot token and prints the invite link; a unified Kanban workflow definition; activate.fish; GPT-6.1 Sol and Claude Sonnet 5.5 / Haiku 5.5 in the catalogs; and dozens of new community plugins.

Full curated release notes for this window ship with v0.22.0, which will document everything from v0.21.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

• Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).


• CLI (git installs): hermes update, or re-run the installer one-liner.


• Desktop app and Termux: no change in this release; they update with the next bundled release.


Security Fixes

Dashboard authentication hardening


• Spoofed X-Forwarded-For headers could reset the password-login rate limit and get around the per-IP cap on native sign-in (#133367)


• Unauthenticated login requests could write unbounded values to the auth audit log (#133369)


• The public /auth/ routes had no request-body size limit (#133370)


• Native sign-in could send login codes to a non-loopback redirect, which allowed session takeover (#130685)


Thanks to Tenable Research for reporting all four issues (TRA-725, TRA-726, TRA-727, TRA-728). The native sign-in redirect issue was also reported independently and fixed by @Froraut. The X-Forwarded-For fix builds on community work by @hinotoi-agent and @BearHuddleston (#40285).

Repository git filter hardening


• Automatic git calls (session workspace snapshot, subagent worktrees, kanban, worktree cleanup, hermes -w) could run clean/smudge/process filter programs defined by an untrusted repository's own config, before the first prompt (#130661)


Thanks to 燕涛 for reporting this privately. It was also reported and fixed publicly by @jonpol01 (#126017, #126019) and @JoaoMarcos44 (#126075).

Email gateway sender hardening


• A quoted display name in the From header (e.g. "Victim <[email protected]>" <[email protected]>) could make an attacker's message pass the email allowlist as an allowed sender (#125212)

Hermes Agent v0.21.5 (v2026.9.24)

Release Date: September 24, 2026

> Patch release. This tag rolls up the ~460 PRs merged since v0.21.4 into a stable tagged release for downstream consumers (Docker images, Hermes Cloud, hosted deployments). Full curated notes for this window are deferred to v0.22.0.

About this release

Measured at commit f97608f178d1ffeca59860195ab7da295f7c8e5f, the window since v0.21.4 contains 1,610 non-merge commits across 4,828 changed files (+164,132 / −149,440), 460 merged PRs and 475 closed issues.

Also in the window, undocumented here on purpose: a Desktop plugin SDK wave (composer draft API, session-list and row-decoration slots, sidebar nav prefs, model-pill label providers, typed settings/skills/toolsets/profiles bridges, a sandboxed embed primitive, appearance-settings slot, and a public event bridge for plugin backends); a Simple/Advanced interface mode for Desktop; the Connectors page replacing the MCP tab, with "Connect now" for a freshly installed plugin's MCP servers and installed plugins' tools and skills going live in every open chat; onboarding that offers catalog plugins beside connectors; complete French, German and Spanish Desktop catalogs plus an RTL/LTR text direction setting; custom model entry from the composer and Settings pickers; function-key and dictation voice shortcuts; per-profile stop/start/restart under the host multiplexer and gateway.standalone to opt a profile out; the live dock showing the standing /goal and queued prompts in the CLI and TUI; a kanban design pass with a two-column ticket modal and markdown task text; webhook deliveries mirrored into the target chat session; Bot Screen on hosted -desktop images; GPT-6 Sol/Terra/Luna and Claude Opus 5.5 in the Nous and OpenRouter catalogs; an official Blender Lab integration and NVIDIA app/Broadcast plugins; a long run of hot-path performance work across config loading, the tool registry, gateway message handling and the model picker; and dozens of new community plugins in the catalog.

Full curated release notes for this window ship with v0.22.0, which will document everything from v0.21.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

• hermes update (git installs), or re-run the installer one-liner.


• Docker / Hermes Cloud: images build from this tag (nousresearch/hermes-agent:v2026.9.24).

Full changelog: https://github.com/NousResearch/hermes-agent/compare/v2026.9.21...v2026.9.24