Intel / repo

OpenHands v1.34.0

Source: github.com
Author: openhands-release-bot[bot]
Date: Published Oct 27, 2026

Context

OpenHands 1.34.0 lets a single conversation's run inside a Docker container. According to pull request #18436, the Home launcher in the open-source coding-agent app now offers Docker Container next to Local, and next to Worktree when a folder is open. A new Runtime page in Settings picks the default and shows only that runtime's options: branch settings for worktrees, and memory, CPU and browser limits for Docker. The Docker choice appears only when the agent server reports it as available. The release also raises the minimum supported agent server to version 1.57.0.

The release also stops exposing a credential to other users on shared machines. The launchers used to pass the session API key to the app's bundled static file server as a command-line argument, and pull request #16420 notes that command lines show up in ps output and under /proc, both readable by any user on a shared host. The key now travels in a SESSION_API_KEY environment variable, while the old flag still works and takes precedence if both are set. The author notes that environment variables can still be read through /proc by the same user, and through docker inspect, so this narrows the exposure rather than removing it; reading the key from standard input or a private temporary file was left for a follow-up.

Key takeaways · AI-distilled

OpenHands 1.34.0 pins the automation KV secret so that rotating the session key no longer leaves previously stored automation KV data unreadable.
A security fix in OpenHands 1.34.0 stops untrusted markdown from setting rel="opener" or an arbitrary link target, closing a route for rendered content to gain a handle on the opening window.
Custom-script automations in OpenHands 1.34.0 can now choose which they use, and the release raises the minimum compatible agent server to 1.57.0, so older agent servers need upgrading.
The OpenHands Agent Canvas macOS app is not yet signed with an Apple Developer ID, so macOS may label downloads as damaged; the notes say clearing the quarantine attribute with xattr once fixes it, with signing tracked separately.

Terms in this piece · Glossary

AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
sandbox — An isolated environment where AI-generated code or agent actions run without being able to touch anything real.
LLM — A large language model — the neural network behind tools like Claude and ChatGPT, trained on huge amounts of text to predict what comes next.

Read the source github.com