Release v0.50.252 — May 1 2026

Six contributor PRs batched + two Opus pre-release follow-ups.

What's in this release

Fork PRs (all CI green, all reviewed by Opus)

Opus pre-release follow-ups (this PR)

• _combined_redact now passes force=True to redact_sensitive_text so the WebUI's API safety boundary catches the agent's broader patterns (Stripe, Google, JWT, DB connection strings, Telegram tokens) regardless of the user's HERMES_REDACT_SECRETS opt-in. The local fallback still handles the short-prefix shapes.
• _active_profile_for_live_models_cache now logs a debug message when get_active_profile_name() raises so we can detect transient profile-resolution failures in production logs.
• Added a regression test for Fix CLI session import fallback model default #1386 (tests/test_session_import_cli_fallback_model.py).

What was held (not in this release)

• fix(ui): mobile composer layout #1381 (mobile composer layout, +918/-57) — labeled hold + ux; needs visual screenshots before merge. Detailed feedback posted on the PR.
• fix: add missing openai and httpx to requirements.txt #1383 (add openai+httpx to requirements.txt) — labeled hold; the WebUI's requirements.txt is intentionally minimal. The real bug is an unguarded from openai import APIError in hermes-agent's run_agent.py. Asked the author to fix upstream.

Pre-release verification

Stage diff

• 14 files changed
• +625 / -22 lines
• 4 new test files (181 new tests)

Release process

1. Merge this PR to master via gh pr merge --merge (no squash — preserve attribution commits)
2. Tag v0.50.252
3. Restart 8787: fuser -k 8787/tcp && sleep 2 && cd ~/hermes-webui-public && bash start.sh
4. Close all 6 underlying PRs with credit comments
5. Sync workspace docs

Contributors

@trucuit, @NocGeek (×5)