--- title: "Release Notes — Threshold rollup and v0.22.2 recovery" type: summary tags: [release-notes, security, gateway, desktop, plugins, local-models] created: 2026-10-21 updated: 2026-10-21 sources: ["raw/github-releases-window-2026-10-20.json", "raw/tag-v0.22.2-website--docs--getting-started--updating.md", "raw/tag-v0.22.2-hermes_cli--subcommands--update.py", "raw/tag-v0.22.2-website--docs--reference--package-management.md", "raw/tag-v0.22.2-website--docs--user-guide--messaging--email.md", "raw/tag-v0.22.2-website--docs--user-guide--security.md", "raw/tag-v0.22.2-hermes_cli--config_defaults.py", "raw/tag-v0.22.2-pyproject.toml", "raw/tag-v0.22.2-website--docs--user-guide--desktop.md", "raw/tag-v0.22.2-website--docs--user-guide--features--memory-providers.md", "raw/tag-v0.22.2-website--docs--user-guide--features--cron.md", "raw/tag-v0.22.2-plugins--memory--byterover--plugin.yaml", "raw/tag-v0.22.2-plugins--memory--retaindb--plugin.yaml"] confidence: high hermes_version: "v0.22.2" --- # Threshold rollup and v0.22.2 recovery ## Key Points The curated v0.22.0 notes cover the intervening v0.21 patches, not only newly introduced behavior. This digest applies their operator guidance at **v0.22.2**. **Skip the mis-built v0.22.1**; it is not a supported intermediate feature release. ### Upgrade without losing the operating boundary - **Update the distribution you actually run.** v0.21.7 changed official source installs to release-following by default; forks and mirrors keep main-branch tracking. Store/MSIX and bundled apps use their package updater, Docker requires a new image, and Nix requires a rebuild. `hermes pm` owns tool/dependency repair, not application distribution. See [[concepts/cli-reference]] and [[entities/hermes-desktop-app]]. - **Prepare the shared host.** Profiles use a common gateway and Desktop backend instead of one service each. Parking one profile is not stopping every profile. Shared OAuth fallback is not full credential isolation; see [[concepts/messaging-gateway]] and [[concepts/profiles-multi-instance]]. - **Fix Email before expecting inbound messages.** Set `EMAIL_AUTHSERV_ID` to the exact receiving server's authentication stamp. Without a pin, sender authentication drops mail even from allowed addresses. The v0.21.6 quoted-display-name allowlist fix is separate from this authentication requirement. See [[entities/platform-email]]. - **Recheck security, not a replacement scanner.** v0.21.6 fixes dashboard login limits/audit/body handling and native callback restrictions, and stops automatic Git operations executing untrusted repository filters. The rollup also narrows child credentials, endpoint-bound key routing, protected storage and plugin guard failures. tirith is removed without enabling a replacement; built-in content checks and approval policy remain. See [[concepts/approval-system]]. - **Preserve session intent.** Core idle/daily reset timers are retired. Retention is a different mechanism: automatic pruning was already enabled before this refresh, with a `90`-day retention default and open/pinned exclusions. Do not describe it as newly opt-in. Cron follows its effective main/fleet model unless pinned, rather than a creation-time snapshot. See [[concepts/memory-system]] and [[concepts/cron-scheduling]]. ### Use the new surfaces without assuming broader permissions Desktop onboarding can use the once-per-OS-user `nous/welcome` trial on a fresh local installation; it does not grant CLI/TUI/gateway free inference. Hosted [[concepts/connectors]] have their own app/account authorization, separate from inference subscriptions. [[concepts/plugin-catalog]] provides reviewed pins, enablement and compatibility warnings; catalog presence is not a guarantee that a plugin is bundled or isolated from the filesystem. Memory-provider and integration migrations preserve a distinction between bundled code and catalog installations. The tagged manifests retain ByteRover and RetainDB bundled; other named memory integrations need their catalog plugin. Current managed Python is `3.14`, but the tagged compatible KittenTTS fork/platform markers govern availability rather than the rollup's blanket “unavailable” sentence. Integrated llama.cpp and LM Studio routes, model favorites/reasoning/quota controls, Bot Screen takeover and live child monitoring reduce setup and supervision friction. They do not make cloud auxiliary tools offline, authorize password disclosure or permit unsupervised transactions. Follow [[concepts/local-models-airplane-mode]], [[concepts/model-switching]], [[concepts/bot-mode]] and [[concepts/subagents-delegation]]. ### What v0.22.2 corrects The patch fixes gateway startup after recycled PIDs on reboot and local-model recovery during long prompts/laptop sleep. It also repairs Mistral tool IDs, preserves custom/env-referenced endpoints when seeding profiles, identifies CDN blocks, and updates vulnerable dependency pins. User tools regain PATH precedence inside the agent terminal; that does not unpin internal PM or search tools. A known limitation remains: sessions run under the wrong v0.22.1 gateway cannot be deleted in v0.22.2. (This wiki's advice: do not work around it by deleting the session database.) Collective Wisdom, the card-style Desktop catalog, unlimited approval waits, parallel Bot Mode rounds, full root-auth isolation, the Classic palette and the tirith catalog plugin were reverted, not shipped features. ## Relevant Concepts - [[entities/version-v0.22.0]] — version boundaries and source-update options - [[entities/version-v0.21.0]], [[summaries/release-v0.21.0]] — earlier historical coverage - [[concepts/connectors]], [[concepts/plugin-catalog]], [[concepts/memory-system]] - [[concepts/approval-system]], [[concepts/messaging-gateway]], [[concepts/profiles-multi-instance]] - [[entities/platform-email]], [[entities/hermes-desktop-app]] - [[concepts/cron-scheduling]], [[concepts/subagents-delegation]], [[concepts/mcp-integration]] ## Source Metadata - **Publisher/type:** Nous Research, official GitHub releases and tag-pinned docs/source. - **Patch window:** v0.21.4 (`v2026.9.21`), v0.21.5 (`v2026.9.24`), v0.21.6, v0.21.7, v0.22.0 and corrected v0.22.2. v0.22.1 is retained only as a skip warning. - **Publication:** v0.22.0 `2026-10-14T03:21:46Z`; v0.22.2 `2026-10-15T08:21:32Z`. The v0.21.7 body dates itself October 11; its API publication is October 12 UTC. - **URLs:** and . - **Attribution:** shared-host/connector operations already appear in v0.21.4; Desktop SDK/navigation and host controls in v0.21.5; security fixes in v0.21.6; stable updates and reasoning replay in v0.21.7. The Threshold digest must not relabel those as brand-new v0.22.0 behavior. - **Boundary:** source inspection, not live GUI/provider/account testing. Tagged implementation governs conflicting headlines; detailed controls and restrictions belong to the linked task guides. ## Sources - `raw/github-releases-window-2026-10-20.json` - `raw/tag-v0.22.2-website--docs--getting-started--updating.md` - `raw/tag-v0.22.2-hermes_cli--subcommands--update.py` - `raw/tag-v0.22.2-website--docs--reference--package-management.md` - `raw/tag-v0.22.2-website--docs--user-guide--messaging--email.md` - `raw/tag-v0.22.2-website--docs--user-guide--security.md` - `raw/tag-v0.22.2-hermes_cli--config_defaults.py` - `raw/tag-v0.22.2-pyproject.toml` - `raw/tag-v0.22.2-website--docs--user-guide--desktop.md` - `raw/tag-v0.22.2-website--docs--user-guide--features--memory-providers.md` - `raw/tag-v0.22.2-website--docs--user-guide--features--cron.md` - `raw/tag-v0.22.2-plugins--memory--byterover--plugin.yaml` - `raw/tag-v0.22.2-plugins--memory--retaindb--plugin.yaml`