Skip to content

build(deps): bump nanobot-ai from 0.1.3.post7 to 0.2.1 in /python - #65

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/nanobot-ai-0.2.1
Open

build(deps): bump nanobot-ai from 0.1.3.post7 to 0.2.1 in /python#65
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/nanobot-ai-0.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Bumps nanobot-ai from 0.1.3.post7 to 0.2.1.

Release notes

Sourced from nanobot-ai's releases.

v0.2.1

🐈 nanobot v0.2.1 is here — 84 PRs merged, 17 new contributors. The agent got a real workbench.

The headline is the WebUI becoming the place where work actually happens. The chat surface is smoother, faster, and easier to trust: live file edits show up as activity, tool traces render more cleanly, source links get readable favicons, markdown and code blocks behave better, new chats survive refreshes, and Thought / response ordering now matches the model's real turn structure. Settings, sidebar controls, model switching, context-window control, slash commands, project workspaces, and access modes all moved closer to a single coherent control surface.

The second story is long-running work getting more durable. Sustained goals no longer trip the runner, goal iteration budget is higher, session locks prevent overlapping turns from stepping on each other, AutoCompact and consolidation races were fixed, heartbeat moved onto cron, and session archive retention got several data-loss fixes. In practice, this means fewer mysterious interruptions, fewer duplicate archives, and a much better chance that a long agent workflow keeps its thread of intent.

The third story is nanobot becoming easier to plug into real stacks. CLI Apps and MCP now share a more unified extension path; preset setup and capability mentions make tools easier to discover; the extension registry gives integrations a first-class home. Provider coverage expanded across Ant Ling, Skywork, Novita, Step Plan, StepFun, Zhipu image generation, OpenAI/Codex image generation, Ollama image generation, and richer OpenAI-compatible configuration. Channels also grew with Signal, Telegram webhook mode, Discord model slash commands, Matrix verification fixes, and safer Weixin / Teams / Matrix behavior.

Highlights

  • WebUI as a daily workbench — The WebUI is no longer just a packaged chat surface. It now has better activity rendering, live file edit visibility, cleaner source links, stronger markdown/code rendering, improved sidebar performance, project workspaces, access controls, context-window settings, model controls, slash command actions, and a more polished native-host feel. The final Thought / response ordering fix makes streamed agent work read in the order it actually happened. (#3877, #3899, #3906, #3951, #3953, #3987, #4007, #4045, #4108, #4121, #4137)

  • Long-running agent stability — Goal mode and multi-turn work got sturdier: sustained goals keep the runner alive, goal iteration budget is extended, process_direct now has per-session locking, streaming/session concurrency bugs were tightened, AutoCompact and consolidator races were fixed, and archive retention now avoids duplicate archives and message loss. (#3881, #3999, #4041, #4104, #4127, #4129)

  • CLI Apps, MCP, and extension workflows — CLI Apps landed as a way to connect CLI-native tools, then got unified with MCP concepts through preset setup, capability mentions, stale install recovery, registry logos, and an extension registry source. The result is a clearer path from "I have a useful local tool" to "nanobot can invoke it in a workflow." (#3963, #3979, #3991, #4046)

  • More providers, richer model routing — The provider surface widened with Ant Ling, Skywork, Novita, Step Plan, OpenAI API type selection, extraBody, and multiple image-generation providers including StepFun, OpenAI/Codex, Ollama, and Zhipu. Several follow-up fixes preserve tool-call IDs, improve quota/billing errors, handle provider transport edge cases, and keep thinking/reasoning controls honest across OpenAI-compatible routes. (#3900, #3910, #3916, #3927, #3946, #3954, #3971, #3974, #3984, #3988, #4048)

  • Channels and deployment polish — Signal support, Telegram webhook mode, Discord model slash commands, Docker/WebUI deployment fixes, and clearer secret/deployment docs make nanobot easier to run outside a local terminal. Gateway cold start also dropped dramatically, from seconds to sub-second territory. (#3872, #3918, #3935, #3996, #4031)

  • Security and reliability hardening — WebSocket token issuance now requires auth, redirect targets are validated before web fetches, IPv6-mapped IPv4 addresses are normalized in SSRF checks, Teams replies trust service URLs, Matrix inbound media downloads are bounded, and shell/exec behavior was tightened on Windows and URL-heavy commands. (#3928, #3933, #4051, #4086, #4103, #4106, #4047)

  • Internationalization and docs — The WebUI locale set was filled out across zh-TW, ja, and remaining keys, the README positioning and news section were refreshed, multi-language doc links were surfaced, local provider setup is easier to find, and AGENTS.md gives coding agents a clearer way into the repo. (#3930, #3962, #3964, #4131)

Community

Huge thanks to everyone who shipped v0.2.1 — 84 PRs, 29 contributors, and a warm welcome to 17 first-time contributors. This release feels less like one big feature drop and more like nanobot becoming something you can keep open all day: steadier, clearer, and much easier to extend.

What's Changed

... (truncated)

Changelog

Sourced from nanobot-ai's changelog.

Release Archive

This page keeps release and daily update history outside the README so the project homepage can stay focused on what nanobot is, what it can do, and how to start.

For tagged releases, see GitHub Releases.

Highlights

  • 2026-07-24 🧭 Guided first-run setup, inline subagents, and model switching from the composer.

  • 2026-07-23 🔎 Grok OAuth with hosted X Search, live image settings, and clearer fallback models.

  • 2026-07-22 🔌 Parallel Search, live configuration reloads, richer app discovery, and a smoother mobile WebUI.

  • 2026-07-21 ⚡ Codex fast mode, visible skill references, safer configuration saves, and sturdier task cleanup.

  • 2026-07-20 💬 Cleaner code blocks and copy actions, self-contained channels, and steadier QQ reconnects.

  • 2026-07-19 🔀 Cross-provider failover, safer local triggers, WhatsApp group allowlists, and sturdier workspace staging.

  • 2026-07-18 🧰 More resilient automation recovery and UTF-8 CLI App installs.

  • 2026-07-17 🌙 Kimi K3 support, more reliable scheduled jobs, and cleaner provider behavior.

  • 2026-07-16 📁 Native folder picker bridges, tighter Docker defaults, and bounded session caching.

  • 2026-07-15 🔐 Short-lived Render access, safer gateway shutdown, validated file previews, and highlighted app mentions.

  • 2026-07-14 📎 Document attachments, one-click Render deployment, clearer workflow docs, and stronger Windows support.

  • 2026-07-13 🌍 Guided WebUI setup, Brazilian Portuguese, and steadier Dream, gateway, and Discord behavior.

  • 2026-07-12 🎯 Explicit /goal activation, safer runtime and workspace access.

  • 2026-07-11 🛠️ Syntax-highlighted previews and diffs, queued prompts, safer edits.

  • 2026-07-10 🧠 Stable model routing, multiline CLI input, new automation guide.

  • 2026-07-09 📝 Live file-edit diffs, safer localhost setup, Matrix image fixes.

  • 2026-07-08 🔐 Safer WebUI/API setup, onboard refresh, responsive prompt rail.

  • 2026-07-07 ⌨️ CLI multiline input, steadier slash commands, safer web fetching.

  • 2026-07-06 💬 Mattermost channel, Serper search, safer Windows shells.

  • 2026-07-04 🔌 MCP reconnects, safer Copilot refresh, Windows shutdown fixes.

  • 2026-07-03 🧙 Guided WebUI setup, plugin controls, Claude Sonnet 4.6 default.

  • 2026-07-02 ⏰ Local triggers with recovery, audit history, WebUI pending status.

  • 2026-07-01 🛡️ API keys for remote binds, $skill shortcuts, clearer tool errors.

  • 2026-06-30 🌐 Provider proxies, Copilot Enterprise, steadier WhatsApp and Weixin.

  • 2026-06-29 🧠 Context replay scaled to model windows, without fixed message caps.

  • 2026-06-28 🖼️ MCP images, steadier WebUI reconnects, safer tool calls.

  • 2026-06-27 🔒 Collision-safe sessions, safer shells, Neonize WhatsApp.

  • 2026-06-25 🎛️ Thinking controls, MiMo voice input, opt-in Telegram rich messages.

  • 2026-06-24 🌙 Kimi Coding and OpenCode, steadier reasoning and Anthropic tool calls.

  • 2026-06-22 🚀 Released v0.2.2 — The Durability Release makes nanobot sturdier for daily agent work: segmented WebUI transcripts, first-class Python SDK runtime controls, automation management, richer search/STT providers, and stronger gateway/session/provider reliability. Please see release notes for details.

  • 2026-06-21 🧰 Python SDK runtime controls, optional Keenable key, cleaner run hooks.

  • 2026-06-20 💬 Telegram rich messages, safer SDK concurrency, smoother Quick Start.

  • 2026-06-19 🔎 Firecrawl app, OpenAI image edits, safer session deletion.

  • 2026-06-18 💬 Feishu recovery, Keenable search, Mistral polish, workspace-aware git.

  • 2026-06-17 🧠 Default idle auto-compact, clearer /dream, macOS installer fixes.

  • 2026-06-16 🎯 Fresher goal context, Kimi K2.7 thinking, cleaner API retries.

  • 2026-06-15 📱 Mobile WebUI polish, optional file tools, real API usage.

  • 2026-06-14 🖼️ Themed cover, partner links, stronger Codex image streaming.

  • 2026-06-13 🗓️ Session-bound automations, sturdier WhatsApp, faster WebUI startup.

  • 2026-06-12 💬 Slack allowlisted channels can require mentions.

  • 2026-06-11 ✂️ Fenced-code message splitting.

... (truncated)

Commits
  • f309982 chore(release): update version to 0.2.1
  • 0e37024 fix(session): archive actual idle compact drops
  • baffd6e fix(session): correct last_consolidated tracking in non-contiguous retention
  • 72fb642 fix(session): prevent duplicate archive and message loss in enforce_file_cap
  • b886b4a docs: add AGENTS.md for Codex
  • a4bd4be Fix thought activity ordering
  • 9ecd25b docs: update nanobot_webui.png for improved visuals
  • 503fc83 docs: rename README cover image
  • 806176f docs: update GitHub README image
  • 081482b docs: refresh README opening positioning
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
build(deps): bump nanobot-ai from 0.1.3.post7 to 0.2.1 in /python
3ccda6f 
Bumps [nanobot-ai](https://github.com/HKUDS/nanobot) from 0.1.3.post7 to 0.2.1.
- [Release notes](https://github.com/HKUDS/nanobot/releases)
- [Changelog](https://github.com/HKUDS/nanobot/blob/main/docs/release-archive.md)
- [Commits](HKUDS/nanobot@v0.1.3.post7...v0.2.1)

---
updated-dependencies:
- dependency-name: nanobot-ai
  dependency-version: 0.2.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants