Release Notes: v0.32 – v0.33

v0.32 — Infrastructure Cleanup

Maintenance release. SearXNG is now bundled directly into the main docker-compose.yml instead of requiring a separate compose file. Go builder bumped to 1.25 for wacli v0.11.0 compatibility.

v0.33 — Webhook Lifecycle & Identity Hardening

Three changes that make webhook-driven workflows more observable and more secure.

Lifecycle reactions

Webhook processing now signals its full lifecycle via emoji reactions in the ping chat:

• 👀 pickup — the agent started processing the event (already in v0.29).
• 🚀 done — the agent turn completed successfully.
• 😕 crash — the turn failed with an unhandled error.

Mid-turn steering for busy threads

If a follow-up event arrives on a GitHub thread where an agent is already working, the new content is injected between tool rounds instead of queuing a separate turn. This means commenting on an issue while the agent is mid-reply steers the current turn rather than spawning a duplicate.

GitHub identity hardening

• Fail closed — if an agent’s GitHub App identity cannot be resolved, the turn now fails instead of silently falling back to the system owner’s token.
• Bot git authorship — commits made by agent tools use the bot’s identity, not the owner’s.
• Auth mutation rail — agents cannot modify GitHub authentication configuration via tool calls.

Bug fixes

• CDP URL injection — the BROWSER_CDP_URL configured in the admin UI Tools tab is now correctly passed to browser test subprocesses.