# changelog

author: yaoxin <1024769339@qq.com> - 5.19.7-1
changelog:
  - Update to 5.19.7 for fix CVEs: CVE-2026-42253, CVE-2026-42588,
    CVE-2026-45505, CVE-2026-46605, CVE-2026-49157, CVE-2026-49270


author: yaoxin <1024769339@qq.com> - 5.19.8-1
changelog:
  - Update to 5.19.8 for fix CVEs: CVE-2026-49432, CVE-2026-49434,
    CVE-2026-49877, CVE-2026-50734, CVE-2026-52760, CVE-2026-53916,
    CVE-2026-53917


author: wangzicheng <wangzicheng15@huawei.com> - 0.1.0-3
changelog:
  - Add 13 upstream patches (commits c3e0c4a..dc6cadb) on top of the tarball baseline:
    CID allocator hardening, vsock/VMM startup refactor, network pool fixes,
    config field validations, sandbox cleanup on signal shutdown, and docs updates


author: wangzicheng <wangzicheng15@huawei.com> - 0.1.0-4
changelog:
  - Add 2 upstream patches (commits adb3079, b064372) on top of the tarball baseline:
    add lock to ensure sandbox cleanup under race, and cleanup prepared snapshots
    on create failure


author: wangzicheng <wangzicheng15@huawei.com> - 0.1.0-5
changelog:
  - Build Conch (conch, conchd, conch-init) from the latest upstream source
    with a bundled Go vendor tree (Source1) and -mod=vendor, plus the
    conch-init initramfs and the guest kernel (Linux 6.6.0); install them
    under /var/lib/conch.
  - Single rpm: merge the Python SDK in and bundle its runtime deps
    (connectrpc, protobuf-py, pyqwest, opentelemetry-api) as per-arch wheel
    tarballs (Source2/Source3) so build and install work fully offline.
  - Ship /etc/conch config (config.yaml and sdk-config.yaml as 0640, CNI
    10-conch.conf) and the conchd systemd unit; require
    containernetworking-plugins and virtiofsd.


author: wangzicheng <wangzicheng15@huawei.com> - 0.1.0-6
changelog:
  - Update Conch.tar.gz to the latest upstream source: conchd serves its API over
    the unix socket only, sandboxes are destroyed when their virtiofsd exits, and
    config.yaml drops the fields conchd fills in itself.
  - Regenerate conch-vendor.tar.xz for the new go.mod, which no longer requires
    go-cni, k8s.io/utils, go-deadlock and goid.
  - Stop installing the Python SDK into python3_sitelib; ship its wheel as
    /usr/share/conch/wheels/conch-*.whl instead, to install with pip. conch itself
    now pulls in no python runtime dependencies.
  - Drop /etc/conch/sdk-config.yaml and conch-sdk-init-config, which the SDK no
    longer uses.
  - Recommend stratovirt instead of cloud-hypervisor, matching the backend the
    shipped config.yaml selects.
  - Take the guest kernel revision from the SP4 branch of src-openeuler/kernel.


author: Witty Team <intelligence@openeuler.org> - 3.0.0-1
changelog:
  - Rename source package to euler-copilot-shell; binary subpackage is witty
  - Provides/Obsoletes euler-copilot-shell and witty-assistant for upgrade from 1.x/2.x
  - Vendor + Go toolchain bundling; static build with CGO_ENABLED=0, GOAMD64=v1


author: Witty Team <intelligence@openeuler.org> - 3.1.0-1
changelog:
  - Add witty-builtin-agent subpackage with built-in agent, skills, and MCP config
  - Ship Role Prompt and config.d fragment for Witty Assistant as default agent (mode=primary)
  - Download 5 SkillHub skills (manpage-skill, log-anomaly-detector, html-report-generator,
    brainstorm-beagle, plantuml-skill) at build time via prepare-release.sh
  - witty now Requires witty-builtin-agent for out-of-the-box agent experience
  - Skill versions centralized in skill-versions.sh, spec Sources use real URLs for CI


author: Witty Team <intelligence@openeuler.org> - 3.1.1-1
changelog:
  - feat: Prompt for provider API key interactively on TTY
  - fix: Make permission handling synchronous to prevent terminal desync
  - refactor: permission display with multi-line title support
  - fix: Change QuestionInfo.Custom from bool to *bool with helper method
  - fix: Refine shell command routing with precise NL detection and Bash generation
  - chore: Adjust builtin agent permissions for read, external directory, and bash
  - chore: Widen witty-builtin-agent permissions and refine prompt
  - chore: Allow witty dirs and experience-skill by default


author: Witty Team <intelligence@openeuler.org> - 3.1.2-1
changelog:
  - fix: Refactor doctor to treat not-running server as OK, remove agent-packages check
  - fix: Move /new force-next detection into dispatch
  - chore: Allow context, websearch, and grep MCPs in builtin agent
  - chore: Extract dev setup dependencies into a shared script
  - chore: Add Go PATH to profile for all setup scripts
  - chore: Clean old release artifacts before building


author: Witty Team <intelligence@openeuler.org> - 3.1.3-1
changelog:
  - feat: Handle session.error events from opencode
  - fix: add bare /session command help in REPL
  - feat(shellbridge): route bare /session to session usage help
  - docs: clarify shell routing, session list, and server status behavior
  - docs: Add comprehensive usage documentation for Witty CLI
  - feat: Stream reasoning echo in EchoRenderer


author: Witty Team <intelligence@openeuler.org> - 3.1.4-1
changelog:
  - fix: timeout when ask receives no events from server
  - fix: guard loader filetriggerpostun during loader removal


author: Witty Team <intelligence@openeuler.org> - 3.1.5-1
changelog:
  - fix(wittyd): read /etc/witty/daemon.toml for socket path, idle timeout and config watch paths
  - fix(wittyd): create /run/wittyd and /var/lib/witty via RuntimeDirectory/StateDirectory to fix systemd startup on clean systems


author: Funda Wang <fundawang@yeah.net> - 1.10.0-3
changelog:
  - Fix CVE-2026-48829: NULL pointer dereference in DIGEST-MD5 parser
  - Fix CVE-2026-56968: memory disclosure via short NTLM challenge


author: gcw_X8YNlwar <wangjintao1@xfusion.com> - 1.20.4-1
changelog:
  - Update to 1.20.4
  - Fix CVE-2026-40354: Prevent trashing of arbitrary host files via symlink attack


