npm / @openhands/extensions
@openhands/extensions
What changed in @openhands/extensions 0.1 to 0.30, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-18.
10 breaking3 security51 new APIs and options22 behavior and defaults6 tooling35 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@openhands/extensions 0.308 changes
Breaking changes 3
The Jira-to-GitLab and Bitbucket templates now require Atlassian Rovo.
Maintainer handoff now requires an explicit issue priority.
Replaces Node 20 with Node 24.
Security 2
Adds audited safeguards for triage and review publication.
PR review now fences untrusted prompt content.
New APIs and options 1
Automations can reach Jira, GitLab, and Bitbucket through connected MCP servers.
Behavior and default changes 1
The VS Code extension installs the backend from pinned release assets.
Fixes and other changes 1
Automation output now shows LLM provenance.
@openhands/extensions 0.291 changes
Tooling 1
The skill adds native design guidance for developers authoring canvas extensions.
@openhands/extensions 0.286 changes
Breaking changes 1
Requires live UI evidence before approving a review.
New APIs and options 1
Adds a simplified-technical-english skill for use by developers.
Tooling 1
Captures visual evidence for frontend PRs.
Fixes and other changes 3
Retries errored deliveries and waits on action_required heads.
Stops steering agents away from deterministic scripts.
Prevents completed reviews from restarting when delayed submitted events arrive.
@openhands/extensions 0.271 changes
New APIs and options 1
Adds a created_by dashboard filter to the interface manifest.
@openhands/extensions 0.2612 changes
New APIs and options 4
Adds an Agent Canvas Apps catalog for developers to use.
Introduces Jev, with examples and upstream guidance.
Adds the runtime-api-configs plugin.
Adds an installable VS Code App.
Behavior and default changes 1
Automation templates can run on OpenHands Cloud and Enterprise.
Fixes and other changes 7
Shares the Agent Canvas link for delegated conversations.
Honors explicit review requests on draft pull requests.
Scans the backlog before applying the launch quota.
Cloud and Enterprise automation runs read secrets from the OpenHands API.
Stale CI is aged from required checks.
Prevents repeat reviews when a pull request head is unchanged.
Codex installs now ship real vendor manifest directories.
@openhands/extensions 0.256 changes
New APIs and options 1
The review extension closes abandoned pull requests that are failing CI.
Behavior and default changes 1
The scheduled scan reviews green pull requests even when a review was not requested.
Fixes and other changes 4
Explicit guidance was added for when to use the APPROVE event.
The repo monitor now honors the AUTOMATION_MODEL profile.
Agent launch is gated on exact-head checks.
Requested reviews resume during a scheduled check scan.
@openhands/extensions 0.244 changes
New APIs and options 3
Adds a skill for building apps with the Canvas Extensions API.
Adds an early scope gate with maintainer handoff for review.
Adds an integration for Granola.
Fixes and other changes 1
Refreshes GitHub state when resuming keyed reviews.
@openhands/extensions 0.237 changes
New APIs and options 1
Reviewers can request a code-aware maintainer.
Behavior and default changes 3
Acceptance criteria are vetted before readiness.
Criteria are maintained in issue bodies.
Reviewer handling now supports reviewer-request events.
Fixes and other changes 3
Active deliveries are no longer restarted.
Event filters are now allowed for bundles.
Review findings are grounded in the full PR context.
@openhands/extensions 0.226 changes
New APIs and options 2
Agent conversation dispatch is shared.
An independent watchdog for GitHub delivery is added.
Behavior and default changes 3
Issue triage is delegated to subject agents.
PR review is delegated to subject agents.
Ready issues are delegated to stable agent subjects.
Fixes and other changes 1
Profile secrets are now forwarded to agent conversations.
@openhands/extensions 0.214 changes
New APIs and options 4
Adds label-triggered issue-to-MR automation.
Adds independent GitHub issue triage.
Adds a skill for OHE self-hosted debugging.
Adds a ReportPortal integration.
@openhands/extensions 0.202 changes
New APIs and options 2
Adds support for generic custom automation setup.
Adds a GitLab MCP server integration.
@openhands/extensions 0.199 changes
New APIs and options 4
The catalog can declare impact statements for completed runs.
Adds a qa-changes automation catalog entry.
Adds a daily organization automation catalog entry integrating Slack, GitHub, and Linear.
Adds a ticket-to-PR provider matrix.
Behavior and default changes 2
The pr-reviewer injects a repository-specific review guide into its prompt.
The pr-reviewer reads the repository's AGENTS.md and guideline documents before reviewing.
Tooling 1
Adds issue and PR readiness gates for ready-for-dev.
Fixes and other changes 2
Corrects the MCP authentication headers used by Datadog.
Fixes use of the Notion MCP token environment variable.
@openhands/extensions 0.185 changes
New APIs and options 3
Direct-setup templates are versioned and provenance is sent, helping developers identify template versions and their origin.
Adds a label-triggered issue-to-PR automation.
Adds a credential-free daily news digest automation.
Behavior and default changes 1
Moves the GitHub repository monitor to Beta, changing its release status.
Tooling 1
Adds a scheduled automation to keep AGENTS.md current.
@openhands/extensions 0.1711 changes
Breaking changes 1
Jira automation now requires Atlassian Rovo.
New APIs and options 2
Marketplace skill entries can now specify defaultEnabled.
A SonarQube integration is now available.
Behavior and default changes 4
The reviewer hides previous automation comments after posting a new review.
The reviewer can poll multiple repositories and owns the review checkout.
The automation now polls instead of using webhooks.
PostHog MCP integration now prefers OAuth.
Fixes and other changes 4
The “add a skill” request now routes to skill-creator.
Cleanup that hides previous comments is guarded against transient API errors.
Agent replies no longer have “Done!” prepended.
Link formatting is clarified so URLs remain clickable in Slack.
@openhands/extensions 0.161 changes
New APIs and options 1
The interface manifest can now declare the dashboard and templates sub-pages.
@openhands/extensions 0.151 changes
New APIs and options 1
Every catalog skill now carries a category.
@openhands/extensions 0.141 changes
New APIs and options 1
Adds the upstream-fork-sync automation.
@openhands/extensions 0.131 changes
New APIs and options 1
Adds the production interface manifest.
@openhands/extensions 0.123 changes
Breaking changes 1
The bare git trigger was dropped from the bitbucket, gitlab and github skills.
New APIs and options 1
The setup contract was added to the automation catalog.
Fixes and other changes 1
Datadog MCP header names are now used by the integration.
@openhands/extensions 0.114 changes
New APIs and options 3
Adds an Atlassian Rovo MCP server using OAuth 2.1.
States authentication scopes for GitHub, Linear, and Slack.
Adds a technical-writing skill for developers to use.
Behavior and default changes 1
Keeps generated .pr/ artifacts fresh during PR iteration.
@openhands/extensions 0.103 changes
New APIs and options 3
Defines a resource model for multi-account connections.
Exports typed integration catalog models for use by developers.
Adds the Vanta integration to the integrations catalog.
@openhands/extensions 0.95 changes
New APIs and options 5
Adds an Agent Canvas automation catalog entry.
MCP shttp/sse transports support custom request headers.
Adds a skill for turning Jira issues into pull requests.
Adds a self-hosted stdio connection to the Atlassian entry.
Adds a Superhuman Mail MCP catalog entry.
@openhands/extensions 0.82 changes
New APIs and options 1
Adds a plain English content skill.
Fixes and other changes 1
The catalog now favors the Notion OAuth connection option.
@openhands/extensions 0.75 changes
Breaking changes 2
Removes defaultTool from integrations.
Drops connectors that have no specification.
New APIs and options 1
Adds Bitbucket hub and Cloud/Data Center spoke skills for developers using these integrations.
Behavior and default changes 1
Linear MCP now prefers OAuth while retaining bearer authentication as a fallback.
Fixes and other changes 1
Fixes logo URLs in the connector catalog.
@openhands/extensions 0.65 changes
New APIs and options 1
Adds an Agent Canvas environment skill.
Behavior and default changes 2
Slack monitor replies are rendered with markdown_text.
Polling automations now use a KV store for cloud-safe state persistence.
Tooling 1
Unifies the catalog into a single JSON source of truth for JavaScript and Python.
Fixes and other changes 1
Aligns nested plugin skill names.
@openhands/extensions 0.52 changes
New APIs and options 1
The Slack channel monitor supports triggered thread follow-ups.
Behavior and default changes 1
GitHub MCP switches to a hosted endpoint.
@openhands/extensions 0.47 changes
Breaking changes 2
The GitHub review automation is renamed to code review agent.
The github-repo-monitor token variable is renamed from GITHUB_TOKEN to GITHUB_PERSONAL_ACCESS_TOKEN.
Security 1
Workflow output handling is hardened.
New APIs and options 1
Adds a skill for creating and debugging GitHub Actions workflows.
Fixes and other changes 3
Prevents PR review automation from going out of control and provides on-demand control.
Colons are replaced in command filenames for Windows compatibility.
Fixes CommonJS helper loading for the issue duplicate checker.
@openhands/extensions 0.32 changes
New APIs and options 1
Exports SKILLS_CATALOG from the ./skills subpath for developers to use.
Fixes and other changes 1
The GitHub PR review agent is taught how suggestion blocks actually work.
@openhands/extensions 0.21 changes
Behavior and default changes 1
The published package now includes the whole repository, making its full contents available to package consumers.
@openhands/extensions 0.12 changes
Tooling 1
A release-please versioning and npm publish pipeline was added.
Fixes and other changes 1
Release tags no longer include the component prefix.