Skip to content

v1.9.5: Qwen Code + Security fixes

Latest

Choose a tag to compare

@sprotasovitsky sprotasovitsky released this 14 Apr 13:11
9618186

What's New

🐼 Qwen Code support

Added Alibaba's agentic coding CLI (optimized for Qwen3-Coder models) to the AI tools registry.

Install: `npm i -g @qwen-code/qwen-code` then `termly start --ai qwen`.

🔒 Security fixes (8 Dependabot alerts patched)

  • axios `^1.6.0` → `^1.15.0` — fixes 2 critical SSRF + 1 high DoS
  • lodash override `^4.18.1` — fixes 1 high code injection + 2 medium prototype pollution
  • ajv override `^8.18.0` — fixes ReDoS
  • follow-redirects `1.16.0` — fixes auth header leak to cross-domain redirects

`npm audit` now reports 0 vulnerabilities.

Upgrade

```bash
npm i -g @termly-dev/cli@1.9.5
```

Full Changelog: v1.9.3...v1.9.5