chore(deps): update dependency nousresearch/hermes-agent to v2026.4.3 #6
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/nousresearch-hermes-agent-2026.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
v2026.3.30->v2026.4.3Release Notes
NousResearch/hermes-agent (NousResearch/hermes-agent)
v2026.4.3: Hermes Agent v0.7.0 (v2026.4.3)Compare Source
Hermes Agent v0.7.0 (v2026.4.3)
Release Date: April 3, 2026
✨ Highlights
Pluggable Memory Provider Interface — Memory is now an extensible plugin system. Third-party memory backends (Honcho, vector stores, custom DBs) implement a simple provider ABC and register via the plugin system. Built-in memory is the default provider. Honcho integration restored to full parity as the reference plugin with profile-scoped host/peer resolution. (#4623, #4616, #4355)
Same-Provider Credential Pools — Configure multiple API keys for the same provider with automatic rotation. Thread-safe
least_usedstrategy distributes load across keys, and 401 failures trigger automatic rotation to the next credential. Set up via the setup wizard orcredential_poolconfig. (#4188, #4300, #4361)Camofox Anti-Detection Browser Backend — New local browser backend using Camoufox for stealth browsing. Persistent sessions with VNC URL discovery for visual debugging, configurable SSRF bypass for local backends, auto-install via
hermes tools. (#4008, #4419, #4292)Inline Diff Previews — File write and patch operations now show inline diffs in the tool activity feed, giving you visual confirmation of what changed before the agent moves on. (#4411, #4423)
API Server Session Continuity & Tool Streaming — The API server (Open WebUI integration) now streams tool progress events in real-time and supports
X-Hermes-Session-Idheaders for persistent sessions across requests. Sessions persist to the shared SessionDB. (#4092, #4478, #4802)ACP: Client-Provided MCP Servers — Editor integrations (VS Code, Zed, JetBrains) can now register their own MCP servers, which Hermes picks up as additional agent tools. Your editor's MCP ecosystem flows directly into the agent. (#4705)
Gateway Hardening — Major stability pass across race conditions, photo media delivery, flood control, stuck sessions, approval routing, and compression death spirals. The gateway is substantially more reliable in production. (#4727, #4750, #4798, #4557)
Security: Secret Exfiltration Blocking — Browser URLs and LLM responses are now scanned for secret patterns, blocking exfiltration attempts via URL encoding, base64, or prompt injection. Credential directory protections expanded to
.docker,.azure,.config/gh. Execute_code sandbox output is redacted. (#4483, #4360, #4305, #4327)🏗️ Core Agent & Architecture
Provider & Model Support
least_usedrotation and 401 failover (#4188, #4300)developerrole for GPT-5 and Codex models — uses OpenAI's recommended system message role for newer models (#4498)hermes model— single code path for both flows (#4200)model.provider(#4329)Agent Loop & Conversation
Memory & Sessions
📱 Messaging Platforms (Gateway)
Gateway Core
/approveand/denynow route correctly when the agent is blocked waiting for approval instead of being swallowed as interrupts (#4798, #4557, closes #4542)/commandslist and Telegram 100-command cap (#3934, #4005, #4006, #4010, #4023)-v/-qflags wired to stderr logging for gateway service (#4474)/updatecommand to avoid systemd permission issues (#4104, closes #4017)Telegram
Discord
/approveand/denyslash commands with interactive button prompts (#4800)discord.reactionsconfig option to disable message processing reactions (#4199)Slack
slack.reply_in_threadconfig option for threaded responses (#4643, closes #2662)WhatsApp
Webhook
Matrix
🖥️ CLI & User Experience
New Slash Commands
/yolo— toggle dangerous command approvals on/off for the session (#3990)/btw— ephemeral side questions that don't affect the main conversation context (#4161)/profile— show active profile info without leaving the chat session (#4027)Interactive CLI
/historyand/resumenow surface recent sessions directly instead of requiring search (#4728)/insightsoverview so total adds up (#4428)--max-turnsCLI flag forhermes chatto limit agent iterations (#4314)config set(#4310, closes #4277)NO_COLORenv var andTERM=dumbfor accessibility (#4079, closes #4066) — @SHL0MSmodel.defaultkey correctly (#4160)Setup & Configuration
Update System
hermes update(#4744)🔧 Tool System
Browser
hermes tools(#4008)browser.allow_private_urls(#4198) — @nils010485File Operations
MCP
ACP (Editor Integration)
Skills System
New/Updated Skills
🔒 Security & Reliability
Security Hardening
.docker,.azure,.config/ghcredential directories from read/write via file tools and terminal (#4305, #4327) — @memosrReliability
is_closedas method in OpenAI SDK — prevents false positive client closure detection (#4416, closes #4377)Windows & Cross-Platform
🐛 Notable Bug Fixes
-pflag — model.model now promoted to model.default correctly (#4160, closes #4486)</think>tags leaking into user-facing responses (#4311, closes #4285)is_closedis a method not property — false positive client closure (#4416, closes #4377)-qqueries no longer exit nonzero (#4613, closes #4601)_config_versionfixed (#4440)🧪 Testing
📚 Documentation
WHATSAPP_ALLOW_ALL_USERSdocumentation (#4293)👥 Contributors
Core
Top Community Contributors
All Contributors
@0xbyt4, @arasovic, @Bartok9, @bcross, @binhnt92, @camden-lowrance, @curtitoo, @Dakota, @Dave Tist, @Dean Kerr, @devorun, @dieutx, @Dilee, @el-analista, @erosika, @Gutslabs, @IAvecilla, @Jack, @Johannnnn506, @kshitijk4poor, @Laura Batalha, @Leegenux, @Lume, @MacroAnarchy, @maymuneth, @memosr, @NexVeridian, @Nick, @nils010485, @pefontana, @Penov, @rolme, @SHL0MS, @txchen, @xsmyile
Issues Resolved from Community
@acsezen (#2537), @arasovic (#4285), @camden-lowrance (#4462), @devorun (#4601), @eloklam (#4486), @HenkDz (#3719), @hypotyposis (#2153), @kazamak (#4178), @lstep (#4366), @Mark-Lok (#4542), @NoJster (#4421), @patp (#2662), @pr0n (#4601), @saulmc (#4377), @SHL0MS (#4060, #4061, #4066, #4172, #4277), @Z-Mackintosh (#4398)
Full Changelog: v2026.3.30...v2026.4.3
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.