edspencer · Oct 29, 2026 · Oct 29, 2026
@@ -1,14 +1,14 @@
 ---
-last_checked_commit: 03b4ccc
-last_run: "2026-08-13T00:00:00Z"
-entries_added: 11
-branches_created: ["docs/changelog-update-2026-02-22", "docs/changelog-update-2026-02-23-manual", "changelog/auto-update-2026-02-25", "changelog/auto-update-2026-02-26", "changelog/auto-update-2026-03-01", "changelog/auto-update-2026-03-06", "changelog/auto-update-2026-03-13", "docs/whats-new-catchup-2026-08-13"]
+last_checked_commit: 0c0a1b3
+last_run: "2026-10-29T00:00:00Z"
+entries_added: 6
+branches_created: ["docs/changelog-update-2026-02-22", "docs/changelog-update-2026-02-23-manual", "changelog/auto-update-2026-02-25", "changelog/auto-update-2026-02-26", "changelog/auto-update-2026-03-01", "changelog/auto-update-2026-03-06", "changelog/auto-update-2026-03-13", "docs/whats-new-catchup-2026-08-13", "changelog/auto-update-2026-10-29"]
 status: completed
 ---
 
 # Changelog Update State
 
-**Last Updated:** 2026-08-13T00:00:00Z
+**Last Updated:** 2026-10-29T00:00:00Z
 
 This document tracks the state of the changelog updater agent, enabling
 incremental reviews that analyze only new commits since the last check.
@@ -19,17 +19,18 @@ incremental reviews that analyze only new commits since the last check.
 
 | Metric | Value | Notes |
 |--------|-------|-------|
-| Last checked commit | 03b4ccc | chore: version packages (#451) |
-| Last run | 2026-08-13T00:00:00Z | Catch-up: reset stale seed (was 6053872, Mar 13) and filled the gap |
-| Entries added (last run) | 11 | Stop/reap sessions, plugins+MCP config, faster job listings, session adoption, custom Claude home, session hardening, token accounting, inline images, token streaming, embeddable scheduler, event contract fixes |
-| Branches created | docs/whats-new-catchup-2026-08-13 | Current update branch |
+| Last checked commit | 0c0a1b3 | chore: version packages (#478) |
+| Last run | 2026-10-29T00:00:00Z | Daily update with 6 user-facing changes |
+| Entries added (last run) | 6 | Session process leak fix, agent settings config, Opus 5.5 support, MCP security hardening, CLI session ID fix, web dashboard reliability |
+| Branches created | changelog/auto-update-2026-10-29 | Current update branch |
 
 ---
 
 ## Run History
 
 | Date | Commits Analyzed | Entries Added | Action | Branch |
 |------|-----------------|---------------|--------|--------|
+| 2026-10-29 | 15 | 6 | created-branch | changelog/auto-update-2026-10-29 |
 | 2026-08-13 | 71 | 11 | created-branch | docs/whats-new-catchup-2026-08-13 |
 | 2026-03-13 | 7 | 3 | Ready for PR | changelog/auto-update-2026-03-13 |
 | 2026-03-06 | 11 | 3 | Ready for PR | changelog/auto-update-2026-03-06 |

@@ -7,6 +7,48 @@ A summary of notable changes across the herdctl packages. For the full technical
 
 ---
 
+### Session Process Leak Fix - Interrupted Turns
+**October 25, 2026** · `@herdctl/core@5.34.1`
+
+Fixed a critical bug where interrupting an agent turn (via Ctrl+C or API error) left the Claude subprocess running indefinitely. The next resume of that session would wait up to 5 minutes before spawning, resulting in duplicate processes. Session cleanup now happens immediately when a turn is aborted, reducing stop-then-send latency from over 60 seconds to 0.3 seconds.
+
+---
+
+### Agent-Level Settings Configuration
+**October 9, 2026** · `@herdctl/core@5.34.0`
+
+Agents can now specify Claude Code settings directly in fleet configuration via the new `settings` field. This enables per-agent control of settings like `autoMemoryDirectory` that project-level `.claude/settings.json` cannot set. Settings are passed securely and work identically on both SDK and CLI runtimes.
+
+---
+
+### Claude Opus 5.5 Support
+**September 27, 2026** · `@herdctl/core@5.33.3`
+
+Updated the minimum required Agent SDK version to support Claude Opus 5.5 (`claude-opus-5-5` model ID). Previous versions bundled an older Claude Code binary that rejected the model with a 400 error. Fleets can now use the latest Opus model.
+
+---
+
+### MCP HTTP Bridge Security Hardening
+**September 27, 2026** · `@herdctl/core@5.33.2`
+
+The MCP HTTP bridge (used for injected MCP servers with CLI and Docker runtimes) now requires authentication. Each bridge generates a random 256-bit bearer token and binds to localhost by default, preventing unauthorized access to injected tools. MCP configurations are now written to owner-only temp files instead of command-line arguments, keeping sensitive headers and environment variables out of process listings. This closes security issue #54.
+
+---
+
+### CLI Session ID Collision Fix
+**August 16, 2026** · `@herdctl/core@5.33.1`
+
+Fixed a race condition where multiple agents sharing a working directory could swap session IDs during concurrent new-session spawns. herdctl now generates a unique session ID and passes it to Claude Code via `--session-id` rather than inferring which transcript file belongs to which agent. This eliminates session attribution errors when running co-located agents.
+
+---
+
+### Web Dashboard Reliability Improvements
+**August 13, 2026** · `@herdctl/web@0.11.1`
+
+Multiple dashboard fixes improve reliability and usability. Chat messages now time out after 15 seconds with a retry option instead of hanging forever. Directory groups in All Chats can now expand beyond the first 10 sessions. Search results are deterministic and no longer leave empty groups visible. WebSocket messages sent immediately after connection no longer get dropped on slow servers.
+
+---
+
 ### Stop and Force-Close Live Sessions from Your App
 **August 12, 2026** · `@herdctl/core@5.33.0` · `@herdctl/core@5.31.0`