Hermes v2026.5.29 Update: Hermes Agent v0.15.1 (2026.5.29) — The Patch

This is a same-day hotfix release that squashes a nasty dashboard bug and cleans up a handful of rough edges from yesterday’s v0.15.0 launch.

What’s New

Docker users get a clearer security switch. Previously, Hermes would automatically disable its dashboard login guard if you bound it to a network-accessible address. That was a bit like assuming anyone who opens their front door also wants to leave it unlocked. Now, the two are completely separate: you can expose the dashboard on your LAN and still require a login. If you genuinely want to skip authentication, you must explicitly set HERMES_DASHBOARD_INSECURE=1. No more guessing games.

MCP servers now actually start in Docker. If you configured MCP tools with bare commands like npx or node, they’d silently fail inside containers because the agent couldn’t find those binaries. It’s like telling someone to run “npm install” but not telling them where npm lives. Now Hermes resolves those against the standard toolchain path, so they just work.

Improvements

The skills page sidebar is back. A small dependency mix-up in the new dashboard made the category filter and source pills collapse to “All” only. Think of it as a TV remote where every button suddenly changed to “channel up.” Fixed—you can browse the full 19,932-entry skills catalog again.

Kanban workers handle shutdown and images better. They now respond properly to SIGTERM (graceful exit instead of being yanked mid-task) and can see images attached to referenced cards—useful when a task says “look at the screenshot in the description.”

Hindsight observations now default to on. This means the agent remembers more context from past conversations by default, which helps with long-running projects.

Fixes

Dashboard infinite-reload loop (the big one). In loopback mode (Docker, hosted Hermes, fresh installs), a stale-token guard misfired on every 401 response, causing the page to reload endlessly. It was like a browser stuck in a “refresh” button loop. Now it correctly ignores the expected 401 in this mode, while still protecting against real session expirations.
/model picker unified across chat and settings—no more inconsistent dropdowns.
/yolo session bypass works as intended again (for those who want to skip confirmations).
.md file attachments are delivered properly instead of being dropped.
Gateway probe-stepdown safety prevents a crash when a probe fails and steps down.
Web-URL redaction passthrough fixed for links that were being over-redacted.
arm64 PR-build cache fixed, so CI builds on Apple Silicon are faster.

What This Means for You

If you were one of the unlucky folks whose dashboard wouldn’t stop reloading, this is the release you’ve been waiting for. For everyone else, it’s a stability pass—fewer surprises, clearer security defaults, and smoother MCP setups. Upgrade if you’re on v0.15.0; if you’re on an older version, this is a solid reason to jump in.

📎 Official release notes: https://github.com/NousResearch/hermes-agent/releases