Skip to content

chore: release 0.44.0 - #4665

Merged
JerrettDavis merged 2 commits into
mainfrom
release-please--branches--main--components--headroom-ai
Nov 10, 2026
Merged

JerrettDavis merged 2 commits into
mainfrom
release-please--branches--main--components--headroom-ai

Conversation

@headroom-release

@headroom-release headroom-release Bot commented Nov 6, 2026 •

Copy link
Copy Markdown
Contributor

🤖 I have created a release beep boop

0.44.0 (2026-11-09)

⚠ BREAKING CHANGES

  • packaging: keep PyTorch extras out of all (#4067)

Features

  • pipeline: say whose request an OutcomeSnapshot is (#4698) (a2bcbd1)
  • providers: add Hermes agent wrap support (#934) (7877241)
  • proxy/model-router: add shadow mode (HEADROOM_MODEL_ROUTER_LOG_ONLY) (#2395) (861ef95)
  • proxy: add lossless /v1/compress mode and detect provider by wire shape (#4617) (33f067a)
  • proxy: expose per-request cost_usd in /stats recent_requests (#1079) (#1565) (84cedbf)
  • proxy: expose shared Redis store availability in /health and /metrics (#4578) (602ca65)
  • proxy: give turn hooks one conversation id per client conversation (#4496) (94a99ed)
  • proxy: report DeepSeek as its own provider in dashboard (#2565) (9ad16a7)
  • proxy: show per-request /stats metadata to token-authenticated callers (#4168) (9b2dec5)
  • proxy: unified multi-upstream routing for Anthropic Cloud and local oMLX (#4597) (f896161)
  • savings: carry cumulative actual output_tokens in history checkpoints (#2921) (8388ff5)
  • wrap: add headroom wrap droid for Factory Droid (#4143) (bb8d18a)
  • wrap: make the Serena code-memory MCP opt-in (#4509) (2649835)

Bug Fixes

  • asgi: stop buffering when the client disconnects (GHSA-mc2f-vg4v-2fh4) (#4701) (c6d7081)
  • beacon: enforce the allowlist below the top-level keys (#4691) (456288d)
  • binaries: fail closed on HEADROOM_BINARIES_ALLOW_UNVERIFIED=0/false (#3218) (da6d973)
  • cache: record TTL observations with relative filenames (#4711) (51d9dc5)
  • cache: round learned TTL upper bounds up to whole seconds (#4710) (13347e3)
  • cache: save prefix-tracker state when the exit signal arrives (#4715) (3ba4223)
  • ccr: lowercase the hash in the streaming feedback recorders (#2313) (3912c04)
  • ci: keep the npm publish token out of install and build steps (#4690) (8f6366c)
  • cli: resolve active proxy port for read commands (#3522) (02c4e92)
  • content-router: trust confident HTML detection over mixed-content heuristics (#3627) (f50db67)
  • dashboard: lifetime metrics and refresh (#2374) (eb9932a)
  • doctor: recognize IPv6 loopback and case-insensitive proxy routing URLs (#3255) (2b0315b)
  • install: decode Windows Task Scheduler XML output before parsing (#3969) (#4064) (b78e07d)
  • install: make install status agree with doctor when the proxy is reachable (#3072) (#3141) (05431b2)
  • langchain: check optional integration availability (#4042) (cde584d)
  • learn: harden analyzer JSON parsing against malformed LLM output (#2471) (12864fc)
  • learn: support opencode v2 session schema in learn scanner (#4199) (c05466a)
  • lossless: fold only pure path listings, never markup (#4716) (0ccd559)
  • memory: gracefully degrade on context lookup and initialization errors (#3251) (#4049) (00d4f44)
  • metrics: cap savings_by_source rows and fold the rest into other (#4257) (2038fb2)
  • packaging: keep PyTorch extras out of all (#4067) (a890521)
  • proxy: add --no-ccr-response-handling flag to bypass response buffering (#3082) (#3100) (ce14271)
  • proxy: bound the Bedrock Prometheus model label (#4694) (d70a8b7)
  • proxy: drop headers named by Connection when forwarding responses (#4674) (3871b36)
  • proxy: keep cold-turn reasoning drops sticky so the next warm turn reuses the cached prefix (#4592) (3544cf5)
  • proxy: keep the Bedrock credentials provider when startup resolution fails (#4705) (5438f00)
  • proxy: refresh Bedrock AWS credentials before they expire (#4696) (adc6724)
  • proxy: rename leaked_threads metric to timed_out_workers_total (#3908) (bd164a2)
  • proxy: track response.-prefixed item and content-part events in Responses SSE state (#4695) (8f4122f)
  • router: compress tool_result blocks in mutable window with trailing messages (#4717) (0511bcd)
  • router: ignore shell operators inside quoted arguments in read detection (#4646) (8cdce17)
  • scripts: skip ci-precheck in the pre-push hook when a push only deletes refs (#4702) (cbcf8d8)
  • sdk: keep Vercel AI SDK tool-result output kinds through compression (#4670) (ce42754)
  • search_compressor: keep kept rows byte-for-byte and in input order (#3982) (a538740)
  • smart-crusher: keep mixed-array dict rows and exact drop count with factor_out_constants (#4692) (ced2685)
  • smart-crusher: keep the row the question names (#4713) (e6e2ebb)
  • storage: return the latest snapshot from JSONLStorage.get (#4675) (b25c45b)
  • tabular: split fixed-width rows on column boundaries, not on double spaces (#4541) (b80245e)
  • tag-protector: do not treat a slash in an unquoted attribute as self-closing (#4681) (d5644cb)
  • tag-protector: keep the enclosing tag open after a nested close in marker mode (#4682) (385d487)
  • telemetry: keep install ID stateless (#3542) (27bba79)
  • tokenizers: resolve chatgpt-4o-* aliases to o200k_base (#4672) (9648d2d)
  • tokenizers: unwrap BatchEncoding in HuggingFaceTokenizer.count_messages (#2447) (9eed58f)
  • vertex: explain Vertex failures in-band, correct the model/region matrix (#2640) (0ddaa56)
  • wrap: route Claude Code's Bedrock mode through Headroom (#4316) (aa2093b)

Dependencies

  • bump rusqlite from 0.40.2 to 0.41.1 (#4658) (74b7ac2)
  • bump the cargo-minor-patch group with 3 updates (#4657) (c01cf07)
  • bump the npm-minor-patch group across 1 directory with 2 updates (#4650) (def4ef1)
  • update click requirement from >=8.3.3 to >=8.5.0 (#4655) (ea59ac3)
  • update sqlite-vec requirement from >=0.1.6 to >=0.1.9 (#4654) (de1a1e0)
  • update tree-sitter requirement from <0.27,>=0.25.2 to >=0.26.0,<0.27 (#4656) (910588e)

This PR was generated with Release Please. See documentation.

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

Devin Review

Comment thread pyproject.toml Resolved
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from 6a8c084 to 960acd7 Compare November 6, 2026 02:14
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from 933528c to be33f34 Compare November 6, 2026 02:15
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from b938a96 to 6e3b93f Compare November 6, 2026 02:17
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from f6e19bb to 32283dd Compare November 6, 2026 02:21
@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from 8c1d262 to 1a88bf1 Compare November 6, 2026 02:53
@github-actions github-actions Bot added status: ci failing Required or reported CI checks are failing and removed status: ci failing Required or reported CI checks are failing labels Nov 6, 2026
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from 43dbba6 to 1cb4b37 Compare November 6, 2026 03:01
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from 0200a9c to db54015 Compare November 6, 2026 03:09
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from b7cbc74 to f7e7819 Compare November 6, 2026 03:10
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from e393f9c to a16a2ec Compare November 6, 2026 03:10
@headroom-release headroom-release Bot changed the title chore: release 0.43.2 chore: release 0.44.0 Nov 6, 2026
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from 5265b84 to 21633bf Compare November 6, 2026 03:12
JerrettDavis
JerrettDavis previously approved these changes Nov 6, 2026

@JerrettDavis JerrettDavis left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed exact head e7d08fc against authoritative main da6d973. The complete16-file delta is generated0.44.0 version/release/changelog metadata; no application source changes. All96 release/version/sync/MCP descriptor tests pass; verify-versions reports0.44.0 aligned; offline lock and whitespace pass. Version alignment resolves the old Devin metadata finding on the obsolete0.43.2 revision. Matching-native input provenance retained, no fresh build or release publication claimed. Exact-head CI42244307308 and Release42244307510 succeeded; full reported rollup terminal and acceptable. Current discussion checked with no newer unresolved finding. Ready for human merge review; no merge, tag or package publication performed.

JerrettDavis
JerrettDavis previously approved these changes Nov 6, 2026

@JerrettDavis JerrettDavis left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed exact head a6d0675 against authoritative main2b0315b2d4b0d54947050bbdad2de9e89df06378. Complete16-file generated0.44.0 release/version/changelog delta only; no application-source changes.96fresh release/version/sync/MCP tests pass;verify-versions0.44.0aligned;offline lock and whitespace pass. Earlier Devin metadata mismatch on obsolete0.43.2 revision remains resolved. Existing matching-native provenance retained,no fresh build or cloud qualification claimed. ExactCI42251232574 and Release42251232685 succeeded;full reported workflow rollup terminalsuccess/skipped. Ready for human merge review;no merge,tag or package publication performed.

JerrettDavis
JerrettDavis previously approved these changes Nov 6, 2026

@JerrettDavis JerrettDavis left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed exact head c1e439c against authoritative upstream/main 0ddaa56, which it already contains. The complete 16-file delta is generated 0.44.0 version/changelog metadata; no application, workflow, dependency selection or setup code changes. Static security/scope review found no unrelated executable changes. The inherited flagged workflow-validation job is skipped on this exact head.

Fresh release/version/sync/MCP descriptor and incoming Vertex/backend/CLI tests: 254 passed, 11 skipped, 1 warning. verify-versions reports all checked versions aligned at 0.44.0; offline lock and whitespace checks pass. Full tracked native inputs and artifact checksum match the recorded reused DLL; no fresh build claimed. Version alignment resolves the historical Devin finding from the obsolete 0.43.2 revision. Current author/review discussion checked.

Exact-head CI 42271076722 and Release 42271076750 succeeded; all reported checks are terminal success/skipped and GitHub reports MERGEABLE. Ready for independent human merge review. No merge, release tag or package publication performed.

@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from c1e439c to 7391e43 Compare November 7, 2026 03:22
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from 9ca33dc to 7edc761 Compare November 7, 2026 03:30
@headroom-release
headroom-release Bot force-pushed the release-please--branches--main--components--headroom-ai branch from f23155e to ad76a73 Compare November 7, 2026 03:31
JerrettDavis
JerrettDavis previously approved these changes Nov 7, 2026

@JerrettDavis JerrettDavis left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Requalified exact head b609d52 against upstream/main 12864fc.

The release metadata consistently advertises 0.44.0, including plugin marketplaces, package manifests, the MCP descriptor and the editable lock entry. The previous Devin metadata finding is resolved. The change contains version metadata and generated changelog updates.

All 18 version-sync tests pass and verify-versions reports aligned versions. Exact-head CI, Release and all actual applicable hosted workflow runs have completed successfully (the changelog guard is skipped for the release bot). Discussion and review threads were rechecked. This verifies release metadata consistency; no fresh native build or live provider behavior is claimed.

JerrettDavis
JerrettDavis previously approved these changes Nov 7, 2026

@JerrettDavis JerrettDavis left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved the 0.44.0 release metadata at c9db613d630267497c6dbaab53c23b2320f11c50 against current upstream main eb9932a671c92b19c58949a63ec833869fc1a8e7.

Current main is an ancestor and GitHub reports the branch mergeable. All 15 changed files outside the reviewed generated changelog were independently checked to contain only the 0.43.1 → 0.44.0 version substitution; package/plugin/marketplace/MCP metadata and the editable lock are aligned. The earlier version-mismatch finding is addressed, and diff whitespace checks pass.

Read-only exact-head verification found all 13 actual workflow runs terminal: 12 successful and the Changelog Guard intentionally skipped. All 75 check runs are terminal (62 successful, 13 skipped), including Security, CI, Release, Rust and Wrap E2E. No new local build/runtime execution was performed for this metadata-only change.

This approval does not merge the PR or authorize release publication. The separately recorded inherited CI-container provenance hold remains applicable to future affected execution; no CI was triggered by this review.

JerrettDavis
JerrettDavis previously approved these changes Nov 9, 2026

@JerrettDavis JerrettDavis left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed exact head 2c81cf4171b5f87626e9c1c2445daa28101bc758, containing current upstream main bb8d18a56abb07ca7e811235c86ea6b626eb1f8b, and existing discussion. The release changes are version metadata plus an additive changelog section (66 additions, no deletions). Generated plugin/marketplace, MCP descriptor, lock and release metadata now consistently reflect 0.44.0, addressing Devin's previous mismatch finding.

scripts/verify-versions.py reports all versions aligned at 0.44.0. All 84 selected release-version, MCP descriptor, release-workflow and CLI help/version tests pass. The published Release, CI, Security, Rust, SDK, OpenCode, Dev Containers, Wrap/Init E2E, metadata-sync and governance runs succeeded; Changelog Guard is explicitly skipped for this release PR. Mergeability is confirmed.

Ready for independent human merge review. This is qualification of the release PR, not authorization to merge or publish; no release or PR was merged/published by this review.

@JerrettDavis JerrettDavis left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-reviewed release head 92531c5 after the new main changes. It contains current upstream main a2bcbd1 and has a clean merge tree. The main-relative diff contains version/release metadata and an additive changelog section (82 additions, no deletions); no contributor runtime logic is introduced by the release patch.

verify-versions.py reports consistent 0.44.0 versions, including plugin/marketplace manifests, server.json, uv.lock and release metadata. All 84 selected release-version, MCP descriptor, release-workflow and CLI help/version tests pass. The previous Devin metadata mismatch is resolved on this head. All 12 observed applicable upstream workflow runs succeeded; Changelog Guard is explicitly skipped for the release PR.

Ready for independent human merge/release review. This approval does not merge the PR or publish a release.

@headroom-release

Copy link
Copy Markdown
Contributor Author

🤖 Created releases:

🌻

This branch was successfully deployed

1 active deployment
Preview — 92531c51 Deployed Nov 9, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

autorelease: tagged Release has been tagged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants