mirror of
https://github.com/tiennm99/serena.git
synced 2026-10-14 18:19:14 +00:00
11 files changed
+121
-46
No files matched your search
+8
-2
@@ -2,6 +2,8 @@
|
||||
|
||||
Status of the `main` branch. Changes prior to the next official version change will appear here.
|
||||
|
||||
# v1.7.0 (2026-08-09)
|
||||
|
||||
* General:
|
||||
- Fix: Race conditions in ProjectServer when used by multiple clients in parallel
|
||||
- Fix: `GitignoreParser` interpolated a directory's name unescaped into gitignore pattern position;
|
||||
@@ -21,13 +23,17 @@ Status of the `main` branch. Changes prior to the next official version change w
|
||||
- Project activation errors are now reported to the client in Serena's system prompt, instead of failures
|
||||
being visible only in the log. This applies both to a failed activation of an explicitly given project and to a
|
||||
failed `--project-from-cwd` auto-detection (#1773).
|
||||
- ProjectServer: Configure trusted hosts (local hosts only) when listening on localhost
|
||||
- SerenaDashboardTrayManager: Configure trusted hosts (local hosts only)
|
||||
- Enclose sub-prompts in XML-like tags to make scopes explicit
|
||||
- Prompts and prompt templates:
|
||||
- Allow initial project prompts and project-specific newly activated modes to use templating
|
||||
- Support function `embed_memory` in prompt templates to inline a memory's contents
|
||||
|
||||
* Security:
|
||||
- ProjectServer: Configure trusted hosts (local hosts only) when listening on localhost
|
||||
- SerenaDashboardTrayManager: Configure trusted hosts (local hosts only)
|
||||
- Use sandboxed environment for prompt templating, preventing attackers from using custom prompts to
|
||||
execute commands in an uncontrolled manner
|
||||
|
||||
* CLI:
|
||||
- Fix: `start-mcp-server` help text for `--project-from-cwd` falsely promised a fallback to the CWD, which was
|
||||
removed in v1.0.0 #1773
|
||||
|
||||
+1
-1
@@ -22,7 +22,7 @@ See the corresponding [memory](.serena/memories/adding_new_language_support_guid
|
||||
|
||||
Before submitting a PR, be sure to document your relevant changes (i.e. new features, fixes) in `CHANGELOG.md`.
|
||||
Use a concise style and add your change to the appropriate section
|
||||
("Language Servers", "Tools", "JetBrains", "CLI", "Memories", "Dashboard", "Hooks", "General").
|
||||
("Language Servers", "Tools", "JetBrains", "CLI", "Memories", "Dashboard", "Hooks", "General", "Security").
|
||||
|
||||
## Python Environment Setup
|
||||
|
||||
|
||||
+1
-1
@@ -10,6 +10,6 @@
|
||||
<p>
|
||||
<b>Maintenance Update.</b> The new v1.1.2 release adds several improvements and fixes.<br>
|
||||
If you have already switched to the uv tool installation of Serena, upgrade as follows:<br>
|
||||
uv tool upgrade serena-agent --prerelease=allow
|
||||
<code>uv tool upgrade serena-agent --prerelease=allow</code>
|
||||
</p>
|
||||
</div>
|
||||
+1
-1
@@ -22,6 +22,6 @@
|
||||
<p>
|
||||
<b>Update Now.</b>
|
||||
If you are using the uv tool installation of Serena, upgrade as follows:<br>
|
||||
uv tool upgrade serena-agent --prerelease=allow
|
||||
<code>uv tool upgrade serena-agent --prerelease=allow</code>
|
||||
</p>
|
||||
</div>
|
||||
+1
-1
@@ -36,6 +36,6 @@
|
||||
<p>
|
||||
<b>Update Now.</b>
|
||||
If you are using the uv tool installation of Serena, upgrade as follows:<br>
|
||||
uv tool upgrade serena-agent --prerelease=allow
|
||||
<code>uv tool upgrade serena-agent --prerelease=allow</code>
|
||||
</p>
|
||||
</div>
|
||||
+1
-1
@@ -40,6 +40,6 @@
|
||||
<p>
|
||||
<b>Update Now.</b>
|
||||
If you are using the uv tool installation of Serena, upgrade as follows:<br>
|
||||
uv tool upgrade serena-agent
|
||||
<code>uv tool upgrade serena-agent</code>
|
||||
</p>
|
||||
</div>
|
||||
@@ -0,0 +1,68 @@
|
||||
<div class="news-item">
|
||||
<h3>Serena v1.7.0</h3>
|
||||
<p class="date">August 9, 2026</p>
|
||||
<p>
|
||||
Here are the highlights of the v1.7.0 release:
|
||||
</p>
|
||||
<p>
|
||||
<b>Grok Support.</b>
|
||||
Serena now supports Grok Build as a client, including the <code>grok</code> context, setup via the CLI,
|
||||
and hooks (<code>serena-hooks --client=grok</code>) with Grok-native PreToolUse allow/deny output.
|
||||
</p>
|
||||
<p>
|
||||
<b>Expanded Language Server Support.</b>
|
||||
Added: Gleam (via <code>gleam lsp</code>), Nextflow (official language server, JAR downloaded
|
||||
automatically, Java 17+ required), Deno and Wolfram (both experimental) as well as
|
||||
<code>python_basedpyright</code> as an alternative Python language server.<br>
|
||||
The managed Java and Kotlin language server were updated.<br>
|
||||
Furthermore, you now have the option of specifying language server priorities, which affect auto-detection during
|
||||
project creation, allowing you to change the default language server for a given language.
|
||||
</p>
|
||||
<p>
|
||||
<b>Renamed Project Setting.</b>
|
||||
The <code>languages</code> key in project configurations is now called <code>language_servers</code>,
|
||||
which better reflects its actual semantics. Existing configurations are migrated automatically.
|
||||
</p>
|
||||
<p>
|
||||
<b>Security Hardening.</b>
|
||||
The project server and the dashboard tray manager now configure trusted hosts (local hosts only) when
|
||||
listening on localhost, and prompt templating runs in a sandboxed environment, preventing attackers from
|
||||
using custom prompts to execute commands in an uncontrolled manner.
|
||||
</p>
|
||||
<p>
|
||||
<b>Prompts & Templating.</b>
|
||||
Initial project prompts and project-specific newly activated modes can now use templating, and the new
|
||||
<code>embed_memory</code> function inlines a memory's contents into a prompt template.
|
||||
Sub-prompts are enclosed in XML-like tags to make scopes explicit.
|
||||
</p>
|
||||
<p>
|
||||
<b>More Liberal Handling of Ignored Paths.</b>
|
||||
Tools that explicitly target a single file (<code>create_text_file</code>, <code>read_file</code>,
|
||||
<code>replace_content</code>) no longer consider ignored paths at all – when a path is explicitly
|
||||
accessed, the agent is assumed to have a good reason for doing so.
|
||||
Tools that traverse a subtree (<code>list_dir</code>, <code>find_file</code>, <code>search_for_pattern</code>)
|
||||
now uniformly offer a <code>skip_ignored_files</code> option.
|
||||
</p>
|
||||
<p>
|
||||
<b>Better Diagnosability.</b>
|
||||
Project activation errors are now reported to the client in Serena's system prompt instead of being visible
|
||||
only in the log, <code>get_current_config</code> includes the language server status, and
|
||||
<code>project health-check</code> exits with a non-zero code when the check fails.
|
||||
</p>
|
||||
<p>
|
||||
<b>Robustness & Fixes.</b>
|
||||
A multitude of fixes across the board, including Scala/Metals (build import and monorepos with several build
|
||||
roots), TypeScript (incomplete reference results on large projects), Erlang (name paths for functions),
|
||||
F#, Nix, Ansible, Rust memory usage, orphaned language server processes on Linux,
|
||||
race conditions in the project server, blocked tool call timeouts, and the dashboard,
|
||||
which now uses the <code>tray_manager</code> interface by default on macOS.
|
||||
</p>
|
||||
<p>
|
||||
See our <a target="_blank" href="https://github.com/oraios/serena/blob/main/CHANGELOG.md">change log</a> for the full list of changes.
|
||||
</p>
|
||||
<p>
|
||||
<b>Update Now.</b>
|
||||
If you are using the uv tool installation of Serena, upgrade as follows:<br>
|
||||
<code>uv tool upgrade serena-agent</code>
|
||||
</p>
|
||||
</div>
|
||||
+1
-1
@@ -4,7 +4,7 @@ requires = ["hatchling"]
|
||||
|
||||
[project]
|
||||
name = "serena-agent"
|
||||
version = "1.6.2.dev0"
|
||||
version = "1.7.1.dev0"
|
||||
description = "A powerful MCP toolkit for coding, providing semantic retrieval and editing capabilities - the IDE for your agent"
|
||||
authors = [{ name = "Oraios AI", email = "info@oraios-ai.de" }]
|
||||
readme = "README.md"
|
||||
|
||||
@@ -4,6 +4,7 @@ import jinja2
|
||||
import jinja2.meta
|
||||
import jinja2.nodes
|
||||
import jinja2.visitor
|
||||
from jinja2.sandbox import SandboxedEnvironment
|
||||
|
||||
from interprompt.util.class_decorators import singleton
|
||||
|
||||
@@ -19,7 +20,7 @@ class _JinjaEnvProvider:
|
||||
|
||||
def get_env(self) -> jinja2.Environment:
|
||||
if self._env is None:
|
||||
self._env = jinja2.Environment()
|
||||
self._env = SandboxedEnvironment()
|
||||
return self._env
|
||||
|
||||
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
__version__ = "1.6.2.dev0"
|
||||
__version__ = "1.7.1.dev0"
|
||||
|
||||
import logging
|
||||
|
||||
|
||||
@@ -428,7 +428,7 @@ name = "clr-loader"
|
||||
version = "0.3.1"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "cffi" },
|
||||
{ name = "cffi", marker = "python_full_version < '3.13' or sys_platform == 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/e4/46/7eea92b6aa2d68af78e049cbecec5f757f1aad44ecdecdc16bbad7eead51/clr_loader-0.3.1.tar.gz", hash = "sha256:2e073e9aaf49d1ae2f56ecba27987ad5fb68be4bcd9dd34a5bed8f0e4e128366", size = 86805, upload-time = "2026-04-18T17:49:44.287Z" }
|
||||
wheels = [
|
||||
@@ -942,17 +942,17 @@ resolution-markers = [
|
||||
"python_full_version < '3.12'",
|
||||
]
|
||||
dependencies = [
|
||||
{ name = "colorama", marker = "sys_platform == 'win32'" },
|
||||
{ name = "decorator" },
|
||||
{ name = "ipython-pygments-lexers" },
|
||||
{ name = "jedi" },
|
||||
{ name = "matplotlib-inline" },
|
||||
{ name = "pexpect", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
|
||||
{ name = "prompt-toolkit" },
|
||||
{ name = "pygments" },
|
||||
{ name = "stack-data" },
|
||||
{ name = "traitlets" },
|
||||
{ name = "typing-extensions" },
|
||||
{ name = "colorama", marker = "python_full_version < '3.12' and sys_platform == 'win32'" },
|
||||
{ name = "decorator", marker = "python_full_version < '3.12'" },
|
||||
{ name = "ipython-pygments-lexers", marker = "python_full_version < '3.12'" },
|
||||
{ name = "jedi", marker = "python_full_version < '3.12'" },
|
||||
{ name = "matplotlib-inline", marker = "python_full_version < '3.12'" },
|
||||
{ name = "pexpect", marker = "python_full_version < '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'" },
|
||||
{ name = "prompt-toolkit", marker = "python_full_version < '3.12'" },
|
||||
{ name = "pygments", marker = "python_full_version < '3.12'" },
|
||||
{ name = "stack-data", marker = "python_full_version < '3.12'" },
|
||||
{ name = "traitlets", marker = "python_full_version < '3.12'" },
|
||||
{ name = "typing-extensions", marker = "python_full_version < '3.12'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/c5/25/daae0e764047b0a2480c7bbb25d48f4f509b5818636562eeac145d06dfee/ipython-9.10.1.tar.gz", hash = "sha256:e170e9b2a44312484415bdb750492699bf329233b03f2557a9692cce6466ada4", size = 4426663, upload-time = "2026-03-27T09:53:26.244Z" }
|
||||
wheels = [
|
||||
@@ -971,16 +971,16 @@ resolution-markers = [
|
||||
"python_full_version == '3.12.*'",
|
||||
]
|
||||
dependencies = [
|
||||
{ name = "colorama", marker = "sys_platform == 'win32'" },
|
||||
{ name = "decorator" },
|
||||
{ name = "ipython-pygments-lexers" },
|
||||
{ name = "jedi" },
|
||||
{ name = "matplotlib-inline" },
|
||||
{ name = "pexpect", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
|
||||
{ name = "prompt-toolkit" },
|
||||
{ name = "pygments" },
|
||||
{ name = "stack-data" },
|
||||
{ name = "traitlets" },
|
||||
{ name = "colorama", marker = "python_full_version >= '3.12' and sys_platform == 'win32'" },
|
||||
{ name = "decorator", marker = "python_full_version >= '3.12'" },
|
||||
{ name = "ipython-pygments-lexers", marker = "python_full_version >= '3.12'" },
|
||||
{ name = "jedi", marker = "python_full_version >= '3.12'" },
|
||||
{ name = "matplotlib-inline", marker = "python_full_version >= '3.12'" },
|
||||
{ name = "pexpect", marker = "python_full_version >= '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'" },
|
||||
{ name = "prompt-toolkit", marker = "python_full_version >= '3.12'" },
|
||||
{ name = "pygments", marker = "python_full_version >= '3.12'" },
|
||||
{ name = "stack-data", marker = "python_full_version >= '3.12'" },
|
||||
{ name = "traitlets", marker = "python_full_version >= '3.12'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/3a/73/7114f80a8f9cabdb13c27732dce24af945b2923dcab80723602f7c8bc2d8/ipython-9.12.0.tar.gz", hash = "sha256:01daa83f504b693ba523b5a407246cabde4eb4513285a3c6acaff11a66735ee4", size = 4428879, upload-time = "2026-03-27T09:42:45.312Z" }
|
||||
wheels = [
|
||||
@@ -1638,7 +1638,7 @@ name = "pexpect"
|
||||
version = "4.9.0"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "ptyprocess" },
|
||||
{ name = "ptyprocess", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/42/92/cc564bf6381ff43ce1f4d06852fc19a2f11d180f23dc32d9588bee2f149d/pexpect-4.9.0.tar.gz", hash = "sha256:ee7d41123f3c9911050ea2c2dac107568dc43b2d3b0c7557a33212c398ead30f", size = 166450, upload-time = "2023-11-25T09:07:26.339Z" }
|
||||
wheels = [
|
||||
@@ -2096,7 +2096,7 @@ name = "pyobjc-framework-cocoa"
|
||||
version = "12.1"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "pyobjc-core" },
|
||||
{ name = "pyobjc-core", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/02/a3/16ca9a15e77c061a9250afbae2eae26f2e1579eb8ca9462ae2d2c71e1169/pyobjc_framework_cocoa-12.1.tar.gz", hash = "sha256:5556c87db95711b985d5efdaaf01c917ddd41d148b1e52a0c66b1a2e2c5c1640", size = 2772191, upload-time = "2025-11-14T10:13:02.069Z" }
|
||||
wheels = [
|
||||
@@ -2113,8 +2113,8 @@ name = "pyobjc-framework-quartz"
|
||||
version = "12.1"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "pyobjc-core" },
|
||||
{ name = "pyobjc-framework-cocoa" },
|
||||
{ name = "pyobjc-core", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
{ name = "pyobjc-framework-cocoa", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/94/18/cc59f3d4355c9456fc945eae7fe8797003c4da99212dd531ad1b0de8a0c6/pyobjc_framework_quartz-12.1.tar.gz", hash = "sha256:27f782f3513ac88ec9b6c82d9767eef95a5cf4175ce88a1e5a65875fee799608", size = 3159099, upload-time = "2025-11-14T10:21:24.31Z" }
|
||||
wheels = [
|
||||
@@ -2131,8 +2131,8 @@ name = "pyobjc-framework-security"
|
||||
version = "12.1"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "pyobjc-core" },
|
||||
{ name = "pyobjc-framework-cocoa" },
|
||||
{ name = "pyobjc-core", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
{ name = "pyobjc-framework-cocoa", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/80/aa/796e09a3e3d5cee32ebeebb7dcf421b48ea86e28c387924608a05e3f668b/pyobjc_framework_security-12.1.tar.gz", hash = "sha256:7fecb982bd2f7c4354513faf90ba4c53c190b7e88167984c2d0da99741de6da9", size = 168044, upload-time = "2025-11-14T10:22:06.334Z" }
|
||||
wheels = [
|
||||
@@ -2149,8 +2149,8 @@ name = "pyobjc-framework-uniformtypeidentifiers"
|
||||
version = "12.1"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "pyobjc-core" },
|
||||
{ name = "pyobjc-framework-cocoa" },
|
||||
{ name = "pyobjc-core", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
{ name = "pyobjc-framework-cocoa", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/65/b8/dd9d2a94509a6c16d965a7b0155e78edf520056313a80f0cd352413f0d0b/pyobjc_framework_uniformtypeidentifiers-12.1.tar.gz", hash = "sha256:64510a6df78336579e9c39b873cfcd03371c4b4be2cec8af75a8a3d07dff607d", size = 17030, upload-time = "2025-11-14T10:23:02.222Z" }
|
||||
wheels = [
|
||||
@@ -2162,8 +2162,8 @@ name = "pyobjc-framework-webkit"
|
||||
version = "12.1"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "pyobjc-core" },
|
||||
{ name = "pyobjc-framework-cocoa" },
|
||||
{ name = "pyobjc-core", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
{ name = "pyobjc-framework-cocoa", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/14/10/110a50e8e6670765d25190ca7f7bfeecc47ec4a8c018cb928f4f82c56e04/pyobjc_framework_webkit-12.1.tar.gz", hash = "sha256:97a54dd05ab5266bd4f614e41add517ae62cdd5a30328eabb06792474b37d82a", size = 284531, upload-time = "2025-11-14T10:23:40.287Z" }
|
||||
wheels = [
|
||||
@@ -2265,7 +2265,7 @@ name = "python-xlib"
|
||||
version = "0.33"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "six" },
|
||||
{ name = "six", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/86/f5/8c0653e5bb54e0cbdfe27bf32d41f27bc4e12faa8742778c17f2a71be2c0/python-xlib-0.33.tar.gz", hash = "sha256:55af7906a2c75ce6cb280a584776080602444f75815a7aff4d287bb2d7018b32", size = 269068, upload-time = "2022-12-25T18:53:00.824Z" }
|
||||
wheels = [
|
||||
@@ -2277,7 +2277,7 @@ name = "pythonnet"
|
||||
version = "3.1.0"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "clr-loader" },
|
||||
{ name = "clr-loader", marker = "python_full_version < '3.13' or sys_platform == 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/05/57/da1992e44663b71365c6e842c8d7fa453d4ec45fb99a68cfee5b7e944d3c/pythonnet-3.1.0.tar.gz", hash = "sha256:7b34c382905d10a371509ffafd64cae0416305c28817738a9cd138336f4e9991", size = 250599, upload-time = "2026-05-23T20:30:21.578Z" }
|
||||
wheels = [
|
||||
@@ -2424,7 +2424,7 @@ name = "qtpy"
|
||||
version = "2.4.3"
|
||||
source = { registry = "https://pypi.org/simple" }
|
||||
dependencies = [
|
||||
{ name = "packaging" },
|
||||
{ name = "packaging", marker = "python_full_version < '3.13' or sys_platform != 'win32'" },
|
||||
]
|
||||
sdist = { url = "https://files.pythonhosted.org/packages/70/01/392eba83c8e47b946b929d7c46e0f04b35e9671f8bb6fc36b6f7945b4de8/qtpy-2.4.3.tar.gz", hash = "sha256:db744f7832e6d3da90568ba6ccbca3ee2b3b4a890c3d6fbbc63142f6e4cdf5bb", size = 66982, upload-time = "2025-02-11T15:09:25.759Z" }
|
||||
wheels = [
|
||||
@@ -2784,7 +2784,7 @@ wheels = [
|
||||
|
||||
[[package]]
|
||||
name = "serena-agent"
|
||||
version = "1.6.2.dev0"
|
||||
version = "1.7.1.dev0"
|
||||
source = { editable = "." }
|
||||
dependencies = [
|
||||
{ name = "anthropic" },
|
||||
|
||||
Reference in new issue
Block a user