Original release notes
Highlights
- Restored real-time autofix support for pull requests opened from forks by bridging review events to credentialed workflows. (#8676)
- Enabled compression cache sharing for OpenAI, Gemini, and Vertex AI to reuse conversation prefixes and reduce redundant input processing. (#8418, #8425)
- Added repository context manifests to guide the /review command with bounded domains, related paths, and recommended tests. (#8654)
- Fixed a security issue where explicitly distrusted workspaces were incorrectly inheriting trust from parent directories. (#8628)
- Improved /review performance by moving remote matching to a deterministic CLI subcommand, achieving up to 93.3% prompt cache hit rates. (#8658)
- Allowed ACP agent tool calls to run concurrently at the configured limit, removing artificial serialization that slowed down fan-out operations. (#8631)
Breaking Changes
No known breaking changes.
Complete Change List
Features
- Review runs now warn users if the executing bundle is older than the current code and document the findings --test-delta flag for severity adjustments. (#8390) by @wenshao
- The daemon now observes and reports memory pressure levels and ratios using real denominators for both the root process and child heaps. (#8423) by @doudouOUC
- Compression cache sharing is now enabled for all OpenAI-compatible providers, including stable session keys for the official OpenAI API. (#8418) by @DragonnZhang
- Compression cache sharing is now enabled for Gemini and Vertex AI to reuse conversation prefixes and reduce redundant input processing. (#8425) by @DragonnZhang
- Group chats can now be approved once via a stable chat ID using the new group pairing policy, allowing access for all members. (#8440) by @qqqys
- Added a repository context manifest to guide the /review command with bounded domains, related paths, and recommended tests for specific repository areas. (#8654) by @wenshao
- Enhanced DingTalk integration to include stable identifiers of mentioned members in the inbound context when the bot is mentioned alongside other users. (#8639) by @BenGuanRan
- Restores real-time autofix support for pull requests opened from forks by bridging review events to the credentialed workflow lane. (#8676) by @wenshao
- Enriches Feishu contact observations with sender display names and group names to replace opaque IDs with recognizable labels. (#8569) by @BenGuanRan
- Improves Web Shell feedback for parallel subagents by keeping status visible, auto-expanding details during work, and collapsing groups upon completion. (#8559) by @carffuca
- Adds optional Mem0 memory write support to the Direct External Context integration for approved content when explicitly enabled in configuration. (#8507) by @doudouOUC
- Improves telemetry attribution to distinguish daemon-spawned sessions from direct CLI launches in usage statistics. (#8670) by @yiliang114
- Added support for installing Web Shell Extensions directly from local .zip or .tar.gz archive files via the Extension manager. (#8621) by @callmeYe
- Feishu users can now answer structured single-select and multi-select questions directly via native Card V2 forms instead of text replies. (#8578) by @BenGuanRan
- Dynamic Workflows now support cooperative pause and resume via the 'p' shortcut in Background Tasks or the '/workflows p' command in the TUI. (#8320) by @qqqys
- Added activeWork, activeWorkReporting, and activeWorkStaleMs fields to the GET /health?deep=1 endpoint to expose current work state. (#8588) by @doudouOUC
- Implemented durable evidence checkpointing for long-running Goals to prevent data loss and manage evidence limits during execution. (#8465) by @qqqys
Bug Fixes
Forced AutoFix review admission now fails closed with explicit validation and stable reason codes when takeover permissions cannot be verified. (#8410) by @qqqys Automatic recap results are now discarded if a new user message starts while the recap is still processing to prevent output from appearing in the wrong turn. (#8573) by @carffuca File caching and session leases now fail closed when inode values are zero to prevent unrelated files from being incorrectly treated as identical. (#8290) by @xianjianlf2 Backward transcript pagination now caps page expansion to prevent single large turns from inflating pages beyond the requested size and byte budget. (#8553) by @wenshao Signal-terminated foreground shell commands are now correctly reported as errors instead of being treated as successful executions. (#8501) by @daleselaji-dev The npm cache producer now runs as a non-root user to prevent file permission issues on persistent self-hosted CI runners. (#8669) by @yiliang114 Same-host daemon bridges now use the regular CLI filesystem service for text reads while keeping text writes delegated through the workspace boundary. (#8620) by @doudouOUC Automated fix jobs backed by personal access tokens are now skipped for fork pull requests that lack repository secrets. (#8671) by @wenshao The triage status comment now finalizes correctly even when the workflow is cancelled or times out, preventing stale running indicators. (#8436) by @wenshao Fixed an issue where slash command names were truncated in narrow terminals, ensuring full command names like 'review' and 'doctor' remain visible in completion menus. (#8657) by @carffuca Removed a blocking disk flush command from directory E2E tests to prevent Vitest worker timeouts on busy self-hosted Linux runners. (#8685) by @wenshao Added a timeout to silent MCP SSE startup attempts in 'qwen mcp list' to prevent the command from hanging indefinitely on unresponsive endpoints. (#8555) by @daleselaji-dev Enabled management of DingTalk interactive card configurations in the daemon channel catalog and ensured Web Shell preserves these object-valued settings. (#8517) by @BenGuanRan Increased SDK request timeouts and stream limits for CI review runs to prevent failures during long upstream processing or large context generation. (#8673) by @wenshao Fixes an issue on Windows where workspace paths with verbatim prefixes caused failures during runtime startup and workspace resolution. (#8619) by @yiliang114 Ensures links in assistant replies open in the system browser when the built-in browser pane fails to load or navigate. (<a href="https://github.com/QwenLM/qwen-code/pull/
