v2026.6.34
发布于 2026-08-08 · 翻译于
🎯 一句话总结：本版本为稳定维护版，全面强化系统安全边界、运行韧性与消息可靠性，未引入新功能。
📋 更新要点（中文翻译）
1强化浏览器与网络边界安全，自动拦截不安全访问路径。
2提升代理运行韧性，网络或进程异常时可自动恢复任务。
3增强频道消息恢复能力，断连后自动续传并稳定消息流。
4优化运维诊断界面，严格限制敏感操作并隐藏凭证信息。
5提高本地运行时稳定性，临时环境波动不再导致任务失败。
6全面升级底层依赖库，修复多项已知安全漏洞与兼容问题。
7优化插件与网关通信机制，提升高负载下的消息投递成功率。
▶查看英文原文（Release Notes）
## 2026.6.34
### Highlights
- **Safer browser and network boundaries:** sandboxed browser routes, trusted DNS targets, custom browser origins, and loopback provider endpoints now reject unsafe access paths. (#97958, #38290, #103075, #110693) Thanks @eleqtrizit, @brunowowk, @mosidevv, @pgondhi987, and @lsr911.
- **More resilient agent and provider runs:** retained session writes, provider fallbacks, stream progress handling, and stdio failures now recover without silently ending active work. (#96100, #97128, #90908, #99803, #100521) Thanks @xialonglee, @sallyom, @richwilson-bloom, @LiuwqGit, @vincentkoc, @yetval, @shengting, and @cxbAsDev.
- **Stronger channel recovery:** pending channel work resumes after recovery, acknowledgements are idempotent, and sustained Discord gateway bursts stay bounded. (#79811, #97041, #104919, #109108, #110954, #103793, #94016) Thanks @indulgeback, @cuiyuxin-gif, @Pick-cat, @Glucksberg, @evan-YM, @zhangguiping-xydt, @yetval, @sheyanmin, and @thomasthelen-kibeauftragter.
- **Safer operator diagnostics:** command and status surfaces keep owner-only actions protected and prevent credentials from appearing in account URLs or summaries. (#98260, #107754, #105017) Thanks @eleqtrizit, @joshavant, @ooiuuii, @aniruddhaadak80, and @tzy-17.
- **More robust local runtime state:** SQLite checkpoints, workspace reads, gateway process signalling, plugin HTTP responses, and dependency handling no longer turn transient host conditions into failed runs. (#99067, #100910, #102125, #109590, #112406) Thanks @ooiuuii, @masatohoshino, @vincentkoc, @mushuiyu886, and @krissding.
### Changes
- **Extended-stable hardening:** this maintenance release carries targeted security and reliability repairs without adding new release-line features.
### Fixes
- **OpenCode Go:** use the documented `hy3` model identifier instead of the failing `hy3-preview` alias.
- **Codex native subagents:** retain the parent app-server subscription and recognize multi-agent V2 child