chore(release): bump to v0.26.0

[ewen-poch]

Summary

v0.26.0 is a feature release. This PR bumps the single source of truth in package.json / package-lock.json and updates the README in all nine languages, the ROADMAP, and the in-app release notes under release-notes/0.26.0/. There are 131 PRs since v0.25.1.

Breaking change: the public Task SDK contract removes legacy session-plan continuation fields; approved plans rebuild from durable session state for every attempt (#2152).

Since v0.25.1 (headline)

Features

• Add Slurm execution mode for remote compute hosts (feat(compute): add Slurm execution mode #2238)
• Add literature reference library and research workflows (feat(literature): add reference library and research workflows #2236, fix(literature): preserve retrieval evidence and document scope #2234)
• Add Apodex provider (feat(providers): add Apodex provider #2147)
• Add latest OpenAI and Anthropic models (feat(providers): add latest OpenAI and Anthropic models #2175)
• Show tool summaries in messages and approvals (feat(notebook): show tool summaries in messages and approvals #2224)
• Expand notebook, memory, and plan permission defaults (feat(permissions): expand notebook, memory, and plan defaults #2225)
• Add preview content context menus (feat(workspace): add preview content context menus #1862)
• Show expandable skill document in load_skill permission card (feat(workspace): show expandable skill document in load_skill permission card #2056)
• Add Task API session configuration controls (feat(task-api): add session configuration controls #2121)
• Support asset-heavy Skill bundles (fix(skills): support asset-heavy Skill bundles #2138)
• Restyle markdown code, table, and mermaid blocks (feat(renderer): restyle markdown code, table, and mermaid blocks #2090)

Improvements

• Smooth streaming output (perf(renderer): smooth streaming output — eliminate per-frame O(n) work, double pacing, and bottom-follow flicker #2141)
• Bound Session resource usage (perf(session-persistence): bound Session resource usage #2167)
• Cache immutable file verification (perf(managed-files): cache immutable verification #2158)
• Honor update cancellation and preserve update offers (fix(update): honor cancellation and preserve update offers #2245)
• Allow automatic package mirrors for notebook environments (fix(notebook): allow automatic package mirrors #2127)

Fixes

• Harden log output and refresh status (fix(diagnostics): harden log output and refresh status #2249)
• Preserve provider state across async completions (fix(settings): preserve provider state across async completions #2232)
• Restore unread notification visibility and expire orphaned requests (fix(notifications): restore unread visibility and expire orphaned requests #2237)
• Preserve retrieval evidence and document scope in literature (fix(literature): preserve retrieval evidence and document scope #2234)
• Preserve tool content and response semantics (fix(provider-protocol): preserve tool content and response semantics #2233)
• Preserve skill package integrity across edits and imports (fix(skills): preserve package integrity across edits and imports #2227, fix(skills): validate recovered packages before deleting backups #2180)
• Preserve active reads during resource revocation (fix(preview): preserve active reads during resource revocation #2230)
• Preserve MCP data and recover credential updates (fix(connectors): preserve MCP data and recover credential updates #2229)
• Preserve session-plan response and delivery correctness (fix(session-plan): preserve response and delivery correctness #2218, fix(session-plan): verify plan read-back through unpublished version read #2114)
• Preserve branch context and clean up failed forks (fix(sessions): preserve branch context and clean up failed forks #2213)
• Preserve delegation attempt results and close lifecycle gaps (fix(delegation): preserve attempt results and close lifecycle gaps #2220, fix(delegation): retain settlement wakes after cancelled quit #2200)
• Preserve specialist package recovery and approved capabilities (fix(specialist): preserve package recovery and approved capabilities #2226, fix(specialists): preserve permissions and recover catalog operations #2221)
• Preserve ownership across recovery and permission waits (fix(acp): preserve ownership across recovery and permission waits #2219)
• Isolate managed runtime state (fix(notebook): isolate managed runtime state #2217)
• Correct environment repair and package outcomes (fix(notebook): correct environment repair and package outcomes #2214)
• Honor reused cell languages and preserve run inputs (fix(notebook): honor reused cell languages and preserve run inputs #2206, fix(notebook): snapshot queued cell execution inputs #2207)
• Preserve queued intent and cancelled uploads (fix(composer): preserve queued intent and cancelled uploads #2215)
• Invalidate managed version checks on file updates (fix(preview): invalidate managed version checks on file updates #2198, fix(preview): preserve version diagnostics and save retry identity #2201, fix(preview): pin managed resources across pagination #2197)
• Probe Windows R through Rscript and preserve stdin on Windows launches (fix(notebook): probe Windows R through Rscript #2212, fix(notebook): preserve stdin in Windows standard launch #2118)
• Preserve authority across delayed lifecycle updates (fix(archive): preserve authority across delayed lifecycle updates #2208)
• Respect newer metadata during lazy hydration (fix(sessions): respect newer metadata during lazy hydration #2209)
• Recover abandoned code write streams (fix(notebook): recover abandoned code write streams #2205)
• Preserve the authority commit boundary in session deletion (fix(session-deletion): preserve the authority commit boundary #2193, fix(deletion): preserve compensation failures #2165)
• Guard quits until runtime lifecycle handoff (fix(startup): guard quits until runtime lifecycle handoff #2202)
• Reject cyclic identity reservations (fix(session-persistence): reject cyclic identity reservations #2192)
• Synchronize previews with publication (fix(artifacts): synchronize previews with publication #2191)
• Confine installer caches to managed runtime storage (fix(notebook): confine installer caches to managed runtime storage #2190)
• Gate writes when the configured data root is missing (fix(storage): gate writes when configured data root is missing #2174)
• Align error notices and diagnostic actions (fix(error-notice): align summaries and diagnostic actions #2186, fix(error-notice): center and enlarge the brand mark #2194)
• Prevent stale memory snapshots and incorrect category selection (fix(memory): prevent stale snapshots and incorrect category selection #2185)
• Release connector response bodies and enforce call budgets (fix(connectors): release response bodies and enforce call budgets #2182)
• Recover finalization in multi-message turns (fix(artifacts): recover finalization in multi-message turns #2187)
• Preserve retries and enforce persisted database contracts (fix(database): preserve retries and enforce persisted contracts #2188)
• Clarify action feedback and enforce accessibility checks (fix(ui): clarify action feedback and enforce accessibility checks #2177, fix(accessibility): restore contrast and keyboard navigation #2176)
• Correct CSV counts and Unicode title search (fix(renderer): correct CSV counts and Unicode title search #2178)
• Translate missed renderer copy (fix(i18n): translate visible renderer copy missed by guards #2181)
• Tolerate corrupt session defaults and isolate concurrent project deletion (fix(projects): tolerate corrupt session defaults #2170, fix(projects): isolate concurrent project deletion #2172)
• Make message snapshots durable (fix(provenance): make message snapshots durable #2161)
• Restore live proxy state after apply failure (fix(settings): restore live proxy state after apply failure #2169)
• Bound startup shell wait (fix(startup): bound startup shell wait #2166)
• Keep retained artifacts readable during session deletion (fix(session-deletion): keep retained artifacts readable #2160)
• Preserve streamed chunks across clock rollback (fix(session-store): preserve streamed chunks across clock rollback #2159)
• Resolve the exact requested artifact version (fix(notebook): resolve the exact requested artifact version #2157)
• Preflight locked update targets on Windows (fix(windows-installer): preflight locked update targets #2155)
• Retry text reads during artifact publication (fix(preview): retry text reads during artifact publication #2154)
• Prevent completion-row height flash (fix(message-scroll): prevent completion-row height flash #2153)
• Time out stalled provider deletions (fix(session-delete): time out stalled provider deletion #2149)
• Avoid replaying finalized artifact claims (fix(workspace): avoid replaying finalized artifact claims #2143)
• Keep the authoritative Run result when the event stream times out (fix(cli): keep the authoritative Run result when the event stream times out #2144)
• Scope provider validation results to model targets (fix(provider-validation): scope results to model targets #2136)
• Keep the Linux application menu visible (fix(window): keep Linux application menu visible #2139)
• Block stale configured model fallback (fix(settings): block stale configured model fallback #2133)
• Preview provider deletion impact (fix(settings): preview provider deletion impact #2137)
• Preserve headless completion across Session writers (fix(tasks): preserve headless completion across Session writers #2100)
• Restore protected Windows REPL startup (fix(notebook): restore protected Windows REPL startup #2122)
• Resolve legacy previews by logical identity (fix(artifacts): resolve legacy previews by logical identity #2111)
• Route follow-up PDF uploads into Reading (fix(pdf-context): route follow-up PDF uploads into Reading #2113)
• Harden remote transfers and host cleanup (fix(compute): harden remote transfers and host cleanup #2087)
• Preserve lifecycle and run identity in Task API (fix(task-api): preserve lifecycle and run identity #2095)
• Guard absent managed-file version API (fix(workspace): guard absent managed-file version API #2105)

Refactor / CI / Tests / Docs

• Use neutral colors while checking network protection (style(settings): use neutral colors while checking network protection #2231)
• Reduce redundant PR-gate checks and shard Windows E2E (ci(pr-gate): reduce redundant checks and shard Windows E2E #2183, fix(windows): retry full-test cleanup and raise shard timeout #2130, fix(windows): keep hosted full-test shards from hanging #2104)
• Clarify config and data root routing; expose narrow session-persistence capability views (refactor(storage): clarify config and data root routing #2173, refactor(session-persistence): expose narrow capability views #2162)
• Characterize resource-bounds paths and repair lifecycle fixtures (test(resource-bounds): characterize leak cache and polling paths #2216, test(ci): repair lifecycle fixtures and synchronize login probes #2211, fix(performance): give Windows runtime soak a realistic timeout #2210)
• Add dependency governance guardrails; disable npm version updates (ci(supply-chain): add dependency governance guardrails #2103, ci(dependabot): disable npm version updates #2112)
• Align Zenodo with stable release notes (ci(release): align Zenodo with stable release notes #2106)
• Refresh localized README headers and add AIPOCH to them (docs(readme): refresh Open Science README header #2148, docs(readme): add AIPOCH to localized headers #2150)
• Correct featured skills count, interface language count, and pairing labels (docs(readme): update featured skills catalog count to 22 #2244, docs(roadmap): correct interface language count to eight #2240, docs(remote): align remote control guide with current pairing UI labels #2241)
• Record storage-compute color and z-index tokens (docs(design): record storage-compute color and modal/toast z-index tokens #2242)
• Document project update flags (docs(cli): document project update --name and --memory/--no-memory flags #2243)

Doc changes in this PR

• README.md (+ eight localized copies) — version banner to v0.26.0; capability rows updated (Agent workflow, Models, Execution, Preview formats, Skills, Safety controls, Distribution and support); a new Literature row.
• ROADMAP.md — "Where We Are Today" v0.26.0 entry (v0.22.0 entry rolls off); the remote-compute "Working today" and "Still open" bullets, Capability Map row, and Phase 4 text updated for the shipped Slurm execution mode; cloud-GPU submission remains the open compute target.
• release-notes/0.26.0/ — in-app release notes in nine languages.

Testing

No code changed — version + docs only. CI will validate.

Release

Annotated tag v0.26.0 will be cut on the merge commit, with message Open Science v0.26.0, triggering the release workflow.

[github-actions]

Codex Review

Verdict: mergeable

No actionable findings.

Summary: The changes are limited to the 0.26.0 version bump and synchronized documentation/release notes. No concrete merge-blocking defect was found.

[github-actions]

Codex Review

Verdict: needs changes

[P2] Restore the missing v0.22.0 roadmap entry

ROADMAP.md:47

Impact: The release history now jumps from v0.21.0 to v0.23.0, omitting the documented v0.22.0 memory, credential, provider, and usage-dashboard milestone.

Recommendation: Restore the removed v0.22.0 paragraph before the v0.23.0 entry.

Summary: The release documentation drops the v0.22.0 history entry while retaining later release entries and references to its shipped features.

[github-actions]

Codex Review

Verdict: needs changes

[P2] Restore the removed v0.22.0 roadmap entry

ROADMAP.md:47

Impact: The release history in “Where We Are Today” now jumps from v0.21.0 to v0.23.0, hiding the shipped v0.22.0 memory, credential-management, and provider changes despite its release notes remaining in the repository.

Recommendation: Restore the deleted v0.22.0 paragraph before the v0.23.0 entry.

Summary: The release metadata and notes are otherwise consistent, but the roadmap accidentally removes the v0.22.0 release entry.

[ewen-poch]

Skipping this one — it is the intended rolling window, not an omission. The version paragraphs in "Where We Are Today" cover recent minor releases only, and the oldest entry ages out as a new one lands; the intro paragraph summarizes the earlier era. Nothing about v0.22.0 is lost from the page: persistent agent memory, centralized credential management, and the token usage dashboard all remain documented under "Working today" and the Capability Map, and the Phase 4 notes still pin the credential work to v0.22.0. Restoring the paragraph would grow this section by one entry with every future minor release.