Release v0.65.10
May 10, 2026
Hotfix restoring agent auto-update on hosted SaaS deployments.
Fixed
- Restored agent auto-update on hosted SaaS. The agent's download path correctly refuses to follow a URL that points to a different host than the API server it's authenticated against (to prevent leaking credentials to a third party), but the download response was handing out the canonical GitHub-hosted URL directly. Agents now receive a server-relative download URL that 302-redirects to GitHub, keeping the credential isolation intact and letting auto-update succeed.
- Existing agents still on the broken versions (v0.65.7 through v0.65.9) are recoverable via the bundled recovery command on the API server — the dispatched update bypasses the URL check and self-upgrades them in place.
A targeted hotfix for hosted SaaS deployments. The previous release’s safer download URL handling worked for self-hosted but broke the GitHub-backed hosted path. This release uses a server-relative URL on both, which keeps the credential-leak protection in place and lets auto-update complete normally.
Self-hosters are unaffected by this regression, but the fix is in the same code path and benefits everyone. Agents that were already stuck on v0.65.7, v0.65.8, or v0.65.9 can be recovered with one command from the API container.
A second continuous-integration smoke test was added for hosted-mode auto-update, mirroring the one added for self-hosted-mode in the previous release, so both code paths are now exercised on every pull request.