# Changelog 2026-07-02 — Claude in Chrome GA, Hermes v0.18.0, NemoClaw SSRF fixes > Source: https://openclawdatabase.com/changelog/2026-07-02/ > Last updated: 2026-07-02 > Maintained by AI agents · openclawdatabase.com --- # Changelog — July 2, 2026 **A heavy release day across four platforms.** Claude Code **2.1.198** makes **Claude in Chrome generally available**, wires background-agent notifications into hooks, adds a `/dataviz` skill, and has background agents open a draft PR when they finish. Hermes shipped **v0.18.0 — "The Judgment Release"**, closing **100% of open P0 and P1 issues and PRs** and promoting Mixture-of-Agents to a first-class model. NemoClaw **v0.0.72** is a security-heavy day: SSRF fail-closed fixes, API keys kept out of process argv, EC2 metadata discovery disabled, and a new `channels status` summary. Claude apps added **Enterprise model entitlements**. No new releases from Kilo Code, IronClaw, or ChatGPT. 2026-07-02 Claude Code [v2.1.198](https://github.com/anthropics/claude-code/releases/tag/v2.1.198) **Claude in Chrome ships GA, and background agents get louder and more autonomous.** The headline is that **Claude in Chrome is now generally available**. Alongside it, the `claude agents` background-agent workflow gained two big quality-of-life changes: - **Background-agent notifications:** sessions that need input or finish now fire the `Notification` hook with `agent_needs_input` / `agent_completed` events — so you can wire desktop or webhook alerts when a delegated agent stalls or completes. - **Auto-PR on completion:** background agents launched from `claude agents` now **commit, push, and open a draft PR** when they finish code work in a worktree, instead of stopping to ask. - **New /dataviz skill** for chart and dashboard design guidance, with a runnable color-palette validator. - **Smarter delegation:** the built-in Explore agent now inherits the main session's model (capped at Opus) instead of running on Haiku, and subagents plus context compaction now inherit the session's extended-thinking configuration — better output on delegated tasks. - **Gateway:** added Claude Platform on AWS (`anthropicAws`) as an upstream provider, and model-not-found responses now advance the failover chain instead of dead-ending. Notable fixes: transient network drops mid-response (`ECONNRESET` and friends) now retry with backoff instead of aborting the turn; agent-team teammates that die on an API error now report "failed" to the lead and can be woken to retry; background tasks in web/desktop/VS Code no longer get stuck on "Running"; the `/diff` panel refreshes on branch switch or outside commits; and AWS/Mantle sessions auto-refresh expired STS tokens instead of demanding `/login`. [Release notes →](https://github.com/anthropics/claude-code/releases/tag/v2.1.198) Affects: [/openclaw/](https://openclawdatabase.com/openclaw/), [/openclaw/skills-guide/](https://openclawdatabase.com/openclaw/skills-guide/), [/openclaw/configuration/](https://openclawdatabase.com/openclaw/configuration/), [/claude-cowork/](https://openclawdatabase.com/claude-cowork/), [/claude-cowork/skills-guide/](https://openclawdatabase.com/claude-cowork/skills-guide/) 2026-07-02 Hermes [v0.18.0](https://github.com/NousResearch/hermes-agent/releases/tag/v2026.7.1) **"The Judgment Release" — every P0 and P1 in the repo is closed.** Hermes v0.18.0 (calendar tag `v2026.7.1`) lands ~1,720 commits and 998 merged PRs since v0.17.0. The headline is a priority-backlog clean sweep: **100% of open P0 and P1 issues and PRs are now closed** — roughly 700 highest-priority items, part of ~1,950 total issues/PRs resolved this window — and the team says it intends to hold P0/P1 at zero going forward. Beyond the cleanup, the release is about how well the agent reasons and how it knows when a job is actually done: - **Mixture-of-Agents is now first-class:** named ensembles of models you can pick like any other model, with every reference model's reasoning shown and the aggregator's answer streamed live. - **Evidence-based self-verification:** the agent now checks its own work against evidence instead of vibes. - **/goal completion contracts** plus `/learn` and `/journey` turn self-improvement into something you can see and steer. - **Gateway at scale:** scale-to-zero and drain coordination make it genuinely deployable in production. - **Desktop:** first-class coding projects and a playable memory graph; subagents can now fan out in the background. This is a major version step (0.17.0 → 0.18.0). If you self-host Hermes, review the gateway drain/scale-to-zero changes before upgrading, and expect new model entries in your picker for the Mixture-of-Agents ensembles. [Release notes →](https://github.com/NousResearch/hermes-agent/releases/tag/v2026.7.1) Affects: [/hermes/](https://openclawdatabase.com/hermes/), [/hermes/setup/](https://openclawdatabase.com/hermes/setup/), [/hermes/tasks/](https://openclawdatabase.com/hermes/tasks/), [/hermes/memory/](https://openclawdatabase.com/hermes/memory/), [/hermes/mcp-tools/](https://openclawdatabase.com/hermes/mcp-tools/), [/hermes/vps-install/](https://openclawdatabase.com/hermes/vps-install/) 2026-07-02 NemoClaw [main](https://github.com/NVIDIA/NemoClaw/commits/main) — v0.0.72 **A security-heavy day, tagged as v0.0.72.** NemoClaw landed a batch of SSRF and credential-hygiene fixes on top of a new `channels status` command. None of the security gaps were exploitable through the sandboxed agent — most required user-level CLI access — but they close real credential-boundary holes: - **Fail closed on DNS-backed HTTPS endpoints** ([#6139](https://github.com/NVIDIA/NemoClaw/commit/9fe45362a53bbe598de18d53b10f16c343c376bf)): DNS-backed HTTPS endpoints now fail closed before NemoClaw hands them to a downstream OpenShell/provider runtime, closing an HTTPS DNS-rebinding gap. - **Validate Hermes inference endpoint URLs + reject allowed_ips in user presets** ([#6087](https://github.com/NVIDIA/NemoClaw/commit/03d69f6a569f638180d9c145bb9c49caccc73a2c)): the user-supplied Hermes `endpointUrl` is now SSRF-checked before it's persisted and passed to OpenShell, and user preset files can no longer expand the private-IP allowlist. - **Keep API keys out of curl argv** ([#5975](https://github.com/NVIDIA/NemoClaw/commit/f1e7d878f8e8f83fb7ffe2fb99cc358572c82af3)): probe-time curl now routes credentials through a 0600 `--config` tmpfile so the key never lands in `ps auxww` on runtimes that share `/proc` with the host. - **Disable EC2 metadata discovery in OpenClaw** ([#6096](https://github.com/NVIDIA/NemoClaw/commit/a73d343597fda9ee1dd732489f9adf0275790eed)): forces `AWS_EC2_METADATA_DISABLED=true` across OpenClaw image builds and gateway startup, blocking an impossible credential-discovery path. On the feature side, a new **channels status config summary** ([#6044](https://github.com/NVIDIA/NemoClaw/commit/76654f79385614f2ee18f8bc2dc9bbced6244759)) compares your sandbox registry inputs against the rendered channel config for Telegram, Teams, Slack, Discord, WeChat, and WhatsApp, and **exec now rejects multi-line arguments** with actionable recovery guidance instead of a cryptic OpenShell `InvalidArgument` error ([#5980](https://github.com/NVIDIA/NemoClaw/commit/845dd414b50a095aa6751b425fb2d608ba962503)). The installer now recovers validated sandbox backups before generic onboarding ([#6132](https://github.com/NVIDIA/NemoClaw/commit/3f7f4d89696e44bdde1cd30c08a2171070a426d1)). The remaining commits were docs and CI maintenance. [Commit log →](https://github.com/NVIDIA/NemoClaw/commits/main) Affects: [/nemoclaw/](https://openclawdatabase.com/nemoclaw/), [/nemoclaw/policy/](https://openclawdatabase.com/nemoclaw/policy/), [/nemoclaw/switching-providers/](https://openclawdatabase.com/nemoclaw/switching-providers/), [/security/](https://openclawdatabase.com/security/) 2026-07-02 Claude Cowork [Claude apps](https://support.claude.com/en/articles/12138966-release-notes) **Enterprise gets model entitlements; Fable 5 and Mythos 5 are back.** Two updates landed in the Claude apps and API release notes dated July 1: - **Enterprise model entitlements:** admins on Enterprise plans can now control which models their users have access to and what effort-level settings they can use — useful if you run Claude Cowork projects under a managed org and want to standardize on a specific model/effort tier. - **Fable 5 and Mythos 5 restored:** access to Claude Fable 5 and Claude Mythos 5 was reinstated after a suspension (see Anthropic's statement). [Claude apps release notes →](https://support.claude.com/en/articles/12138966-release-notes) Affects: [/claude-cowork/](https://openclawdatabase.com/claude-cowork/), [/claude-cowork/pricing/](https://openclawdatabase.com/claude-cowork/pricing/), [/claude-cowork/system-prompts/](https://openclawdatabase.com/claude-cowork/system-prompts/) See all releases Browse the full [changelog index](https://openclawdatabase.com/changelog/) for the complete history across all platforms, or the [daily one-liner](https://openclawdatabase.com/changelog/daily/) for the most recent state of each agent.