# oh-my-openagent v5.0.0-beta.10 - Product: oh-my-openagent (https://whatsnew.fyi/product/oh-my-openagent) - Vendor: oh-my-openagent - Date: 2026-08-18 - Version: v5.0.0-beta.10 - Original notes: https://github.com/code-yeongyu/oh-my-openagent/releases/tag/v5.0.0-beta.10 - Permalink: https://whatsnew.fyi/product/oh-my-openagent/releases/v5.0.0-beta.10 - Labels: Pre-release What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **fixed** — Ast-grep setup now fails with a clear bounded failure instead of hanging indefinitely when the child process refuses to exit - **changed** — Installation now enforces a live timeout for ast-grep provisioning and terminates stuck child installers - **changed** — CI validation skips unnecessary root jobs for web/docs-only changes and verified generated release-state merges - **changed** — Publication now reuses the successful full CI workflow for the exact prepared commit instead of running a second release-local matrix - **changed** — Release credentials are isolated so that the release PAT is available only for the push/PR step - **changed** — The credential-bearing git remote is removed even when publication fails via an EXIT trap - **changed** — Native-shell execution and Bun 1.3.14 pinning improve Windows release checks to match the supported runtime more closely - **changed** — Windows root tests now execute under native PowerShell instead of Git Bash - **changed** — File-URL handling in CI classifier tests uses native Windows path conversion including drive-letter paths - **changed** — Ast-grep provisioning deadline is kept active and child processes that exceed the deadline are terminated with one second grace before explicit failure ##### Reliable installs, faster CI, safer releases ###### Ast-grep setup now fails clearly instead of hanging OpenCode and LazyCodex installation now enforce a live timeout for ast-grep provisioning, terminate stuck child installers, and report a clear bounded failure if the child refuses to exit. Install commands no longer sit indefinitely behind a silent provisioning process. ###### Faster validation without source-coverage shortcuts Web/docs-only changes and verified generated release-state merges can skip unnecessary root jobs, while missing diffs, normal source changes, and release-looking non-merge commits still run full validation. ###### Releases are tied to one validated source SHA Publication now reuses the successful full CI workflow for the exact prepared commit instead of running a second release-local matrix that could diverge from the code being shipped. ###### Release credentials stay out of build scripts Repository-controlled generation runs without the release PAT. The token is available only for the push/PR step, and the credential-bearing remote is removed even when publication fails. ###### More predictable Windows release checks Native-shell execution, Bun 1.3.14, Windows-safe script resolution, and targeted serial execution remove known environment mismatches and timeout instability from the release path. --- ###### A reliability-focused beta `v5.0.0-beta.10` is a focused hardening release for installation, continuous integration, and the synchronized publish pipeline. There are no breaking user-facing changes in this beta. The main result is that failed setup work now stops predictably, release builds are validated against the exact source being published, credentials have a narrower exposure window, and Windows checks run closer to real Windows behavior. ###### What changed ###### Installer timeouts now finish predictably The shared ast-grep provisioning path no longer relies on an unreferenced timer that could be starved while a child process remained stuck. The installer now: - keeps the primary 30-second deadline active; - terminates a child that exceeds that deadline; - gives termination one second to settle; and - reports an explicit failure if the child ignores termination instead of hanging indefinitely. This matters most on failure paths: a broken shell, stalled download, or unresponsive installer should now produce a bounded result rather than holding the CLI or CI job open until a much larger outer timeout expires. ###### Releases reuse validation from the exact source SHA The publish workflow no longer starts a second, redundant test/typecheck/compatibility matrix. Instead, it requires a successful full CI workflow for the exact prepared release SHA and fails closed when that proof is unavailable. The gate handles both valid release paths: the release-state pull request's exact-SHA run and the post-merge push run. It retries temporary GitHub API failures, waits for active validation to finish, stops when completed runs have no success, and enforces a bounded overall timeout. This makes the release faster while preserving the important guarantee: the source that passed CI is the source that gets published. ###### Release credentials are more tightly isolated Release-state generation and privileged publication are now separate steps. Dependency installation, version synchronization, lockfile updates, and generated-artifact rebuilds run without the release PAT. The token is present only in the step that pushes the prepared branch and manages its pull request. The authenticated git remote is also protected by an `EXIT` trap, so it is restored to a clean token-free URL even when a push fails. This reduces the chance of a credential remaining in repository configuration for later commands or diagnostic output. ###### CI skips expensive work only when it can prove that it is safe A new changed-path classifier identifies two narrow cases that do not need the full repository _[Truncated at 4000 characters — full notes: https://github.com/code-yeongyu/oh-my-openagent/releases/tag/v5.0.0-beta.10]_