docs(readme): update What's New to v0.8.23
This commit is contained in:
Hunter Bown
@@ -225,40 +225,31 @@ deepseek --provider ollama --model deepseek-coder:1.3b
|
||||
|
||||
---
|
||||
|
||||
## What's New In v0.8.20
|
||||
## What's New In v0.8.23
|
||||
|
||||
A hotfix release for Chinese reasoning language, DeepSeek endpoint defaults,
|
||||
and the v0.8.18 TUI/runtime/install polish.
|
||||
[Full changelog](CHANGELOG.md).
|
||||
A security-focused follow-up to v0.8.22: sanitized child-process environments,
|
||||
tighter tool-safety classifications, and fixes for MCP, secrets, and the
|
||||
runtime API. [Full changelog](CHANGELOG.md).
|
||||
|
||||
- **Chinese reasoning stays Chinese** - when the latest user message is in
|
||||
Simplified Chinese, V4 `reasoning_content` and the final reply are prompted
|
||||
to stay in Simplified Chinese even on an English system locale.
|
||||
- **DeepSeek beta endpoint stays default worldwide** - Chinese locales and
|
||||
legacy `deepseek-cn` configs now use `https://api.deepseek.com/beta`, so
|
||||
strict tool mode and other beta-gated features remain available.
|
||||
- **`deepseek-cn` is legacy-only** - it is no longer advertised as a separate
|
||||
provider. Existing configs still parse it as a backwards-compatible alias for
|
||||
`deepseek`.
|
||||
- **Plain `deepseek` starts fresh** - opening a second terminal in the same
|
||||
folder now creates a new session instead of silently re-entering the same
|
||||
interrupted checkpoint. Use `deepseek --continue` when you want recovery.
|
||||
- **Docker is a supported install path** - release builds publish
|
||||
`ghcr.io/hmbown/deepseek-tui` images with `latest`, semver, and `vX.Y.Z`
|
||||
tags; Docker publishing is part of the release gate.
|
||||
- **Chinese destructive approval dialogs are localized** - zh-Hans approval
|
||||
copy keeps explicit destructive-risk wording while English defaults stay
|
||||
unchanged.
|
||||
- **Transcript scrollbar dragging** - with mouse capture enabled, drag the
|
||||
transcript scrollbar thumb to move through long sessions.
|
||||
- **Viewport drift fix** - terminal scroll margins and origin mode are reset
|
||||
before key repaints, with a PTY regression for the blank-top-rows bug.
|
||||
- **npm installs are more resilient** - transient release-download failures
|
||||
are recoverable at postinstall time, while checksum, platform, glibc, and
|
||||
runtime failures remain fatal.
|
||||
- **Plus**: FreeBSD secrets-crate compile fallback, Docker Buildx cache-race
|
||||
fix, readable light-theme toggles, softer long-session text colors, Windows
|
||||
sandbox guarantee cleanup, and rustup mirror/install troubleshooting updates.
|
||||
- **Child-process environment scrubbed** — shells, MCP servers, hooks, and other
|
||||
spawned subprocesses now start from an explicit env allowlist instead of
|
||||
inheriting every parent variable. No more accidental `*_API_KEY` or
|
||||
`GITHUB_TOKEN` leakage through subprocesses.
|
||||
- **macOS Keychain prompts gone** — the file-backed secret store is now the
|
||||
default; the OS keyring is opt-in via `DEEPSEEK_SECRET_BACKEND=system|keyring`.
|
||||
- **MCP servers stay working** — MCP stdio launches now inherit the env vars
|
||||
that `npx`, `uvx`, `python -m`, and proxy-bound corporate setups need, while
|
||||
still scrubbing secrets.
|
||||
- **MCP spawn errors are visible** — instead of an opaque wrapper message, you
|
||||
now see the real OS error ("No such file or directory") when an MCP server
|
||||
can't start.
|
||||
- **Live thinking is compact by default** — the streaming thinking panel
|
||||
collapses by default; expand via the details toggle.
|
||||
- **Runtime API requires auth by default** — `deepseek serve --http` no longer
|
||||
accepts unauthenticated requests.
|
||||
- **Plus**: hardened `run_tests` approval, symlink-traversal guards, Plan-mode
|
||||
tool-surface tightening, path-sanitization fixes, and a new
|
||||
`docs/RELEASE_CHECKLIST.md`.
|
||||
|
||||
---
|
||||
|
||||
|
||||
+16
-17
@@ -192,25 +192,24 @@ deepseek --provider ollama --model deepseek-coder:1.3b
|
||||
|
||||
---
|
||||
|
||||
## v0.8.20 新功能
|
||||
## v0.8.23 新功能
|
||||
|
||||
面向中文思考语言、端点默认值、TUI、运行时和安装体验的热修复版本。[完整更新日志](CHANGELOG.md)。
|
||||
面向安全的 v0.8.22 跟进版本：子进程环境清理、工具安全分类收紧，以及 MCP、
|
||||
密钥存储和运行时 API 的修复。[完整更新日志](CHANGELOG.md)。
|
||||
|
||||
- **中文思考保持中文** —— 当最新用户消息是简体中文时，即使系统 locale
|
||||
是英文，V4 的 `reasoning_content` 和最终回复也会被提示保持简体中文。
|
||||
- **直接运行 `deepseek` 会启动新会话** —— 同一目录开第二个终端时，不再静默进入
|
||||
同一个中断检查点；需要恢复时请显式使用 `deepseek --continue`。
|
||||
- **Docker 成为受支持安装方式** —— 发布流程会推送
|
||||
`ghcr.io/hmbown/deepseek-tui`，包含 `latest`、语义版本和 `vX.Y.Z` 标签。
|
||||
- **中文危险审批弹窗本地化** —— zh-Hans 文案会明确保留破坏性风险提示，
|
||||
英文默认行为不变。
|
||||
- **对话滚动条支持拖拽** —— 开启鼠标捕获后，可直接拖拽 transcript 滚动条。
|
||||
- **修复终端视口漂移** —— 关键重绘前会重置滚动边界和 origin mode，并加入 PTY
|
||||
回归测试覆盖顶部空行问题。
|
||||
- **npm 安装更稳健** —— postinstall 阶段的临时下载失败可恢复；校验和、平台、
|
||||
glibc 和运行时错误仍然保持失败。
|
||||
- **此外**：FreeBSD secrets crate 编译回退、Docker Buildx cache 竞争修复、
|
||||
长会话文本配色微调、Windows 沙箱保证说明收紧，以及 rustup 镜像安装排障更新。
|
||||
- **子进程环境已清理** — shell、MCP 服务器、hooks 等子进程现在从显式环境变量
|
||||
白名单启动，不再继承所有父进程变量。`*_API_KEY`、`GITHUB_TOKEN` 等敏感信息
|
||||
不会通过子进程泄露。
|
||||
- **macOS 钥匙串弹窗已消除** — 文件存储现在是默认的密钥后端；系统钥匙串需通过
|
||||
`DEEPSEEK_SECRET_BACKEND=system|keyring` 主动选择加入。
|
||||
- **MCP 服务器保持正常运行** — MCP stdio 启动时保留 `npx`、`uvx`、`python -m`
|
||||
和企业代理等所需的环境变量，同时继续清理密钥。
|
||||
- **MCP 启动错误现在可见** — 不再显示模糊的包装错误信息，而是直接展示真实的
|
||||
操作系统错误（如 "No such file or directory"）。
|
||||
- **实时思考默认折叠** — 流式思考面板默认折叠，可通过详情切换展开。
|
||||
- **运行时 API 默认要求认证** — `deepseek serve --http` 不再接受未认证请求。
|
||||
- **此外**：加固 `run_tests` 审批策略、符号链接遍历防护、Plan 模式工具集收紧、
|
||||
路径清理修复，以及新增 `docs/RELEASE_CHECKLIST.md`。
|
||||
|
||||
---
|
||||
|
||||
|
||||
Reference in New Issue
Block a user