v0.21.6 — Patch release

Released: October 8, 2026 Theme: A patch release that rolls up about 2,100 merged PRs since v0.21.5

This is the first release from the new stable release pipeline: each release passes its Docker image tests before it ships. The full feature notes ship with v0.22.0. From this release on, version numbers look like v0.21.6 and no longer carry a date.

Highlights

• Dashboard sign-in hardening: a spoofed X-Forwarded-For header can no longer get around the sign-in rate limit; signed-out requests can no longer write unbounded values to the sign-in log; sign-in routes now have a request size limit; sign-in codes are no longer sent to a non-local redirect (a bug that could let someone take over the session).
• Git hardening: automatic git calls (workspace snapshots, subagent worktrees, kanban and more) no longer run filter programs defined by an untrusted repository’s own config.
• Email sender checks: a forged message that hides another address inside the sender’s display name can no longer pass as an allowed sender.
• Other changes in this window (details in v0.22.0): live transcription while you speak, third-party plugins running in their own per-profile host, favorite models pinned to the top of the picker, a summary-first hermes status, GPT-6.1 Sol and Claude Sonnet 5.5 / Haiku 5.5 in the catalogs, and dozens of new community plugins.

Official link

Hermes Agent v0.21.6 release notes