Evidence record / openhands
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensions
Install snapshot is Canvas v1.33.0 with separately pinned services and extensions. As observed on 24 October, npm latest selects Canvas 1.33.0; alpha/beta selectors are older publications. Install npm install -g @openhands/agent-canvas@1.33.0, then agent-canvas, with Node >=24 and uv, or use the release’s desktop assets. The all-in-one image can be pinned to ghcr.io/openhands/agent-canvas:1.33.0; its latest and version selectors returned the same digest at their recorded reads. The bundle pins agent-server 1.58.1, automation 1.25.1 and extensions 0.35.0, and rejects remote servers below 1.55.0. Enterprise source 1.79.0 is separate, with Compose selecting Canvas 1.32.0 plus SDK 1.58.1 and automation 1.25.1. The Canvas beta-badge removal is not an operational guarantee.
Channel: tagged-release. Half: capability. Date: 2026-10-24 (pointer observations); 2026-10-23 (Canvas v1.33.0 publication).
Operator consequence: Coordinate separately managed services and pin both outer Canvas and any inner conversation-server image. Keep licensed Enterprise distribution and Cloud serving identity separate from public source releases. Selectable Docker and Enterprise child launching are opt-ins with the exact network/gate qualifications in section 6; the DigitalOcean bridge requires MARS_WEB=1. Session-key argv removal, ACP OAuth forwarding and Debian CA repair remain on the inspected main branches, outside the current stable bundle. No install or container was executed.
Receipt
- https://github.com/OpenHands/OpenHands/releases/tag/v1.33.0
- https://github.com/OpenHands/OpenHands/blob/v1.33.0/README.md
- https://github.com/OpenHands/OpenHands/blob/v1.33.0/package.json
- https://github.com/OpenHands/OpenHands/blob/v1.33.0/config/defaults.json
- https://registry.npmjs.org/@openhands%2fagent-canvas
- https://github.com/OpenHands/enterprise/releases/tag/1.79.0
- https://github.com/OpenHands/enterprise/commit/8b923c3568a8809adbb9b648d2a0ee95d5cc527a
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensions
Source links
Primary links, including exact changelog lines when available.
- github release2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensionsOpenHands/OpenHands / v1.33.0tagged commit file2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensionsOpenHands/OpenHands / README.mdtagged commit file2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensionsOpenHands/OpenHands / package.jsontagged commit file2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensionsOpenHands/OpenHands / config/defaults.jsonofficial docs2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensionsregistry.npmjs.org/@openhands%2fagent-canvasgithub release2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensionsOpenHands/enterprise / 1.79.0commit2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensionsgithub.com/OpenHands/enterprise/commit/8b923c3568a8809adbb9b648d2a0ee95d5cc527a
Versioned source: run artifact