InvokeAI Version 6.13.7

⚠️ This is a security patch release

All recent versions of InvokeAI through 6.13.6 contain a security hole that potentially allows an attacker to recover the contents of the running instance's invokeai.yaml and api_keys.yaml files. These files can contain sensitive data including API keys for image generation hosting services and API download tokens for HuggingFace and other ...

We recommend all users upgrade. v1.14.0 is a providers-and-plumbing release: six new ways to connect models, a DNS-rebinding hardening pass on every outbound provider call, and fixes to two failure modes that could silently break a working install after a redeploy. Validated through the full release process — backend/frontend suites, a fresh-install and an upgrade test against real Docker images, and an end-to-end pass over the running app.

🔒 Security hardening

Hermes Agent v0.19.0 (v2026.7.20)

Release Date: July 20, 2026
Since v0.18.0: ~2,245 commits · ~1,065 merged PRs · ~2,465 files changed · ~300,000 insertions · ~36,000 deletions · ~3,300 issues closed · 450+ community contributors

The Quicksilver Release. Hermes is the messenger god, and this window we made him move like it. First-turn time-to-first-token dropped ~80% o...