Download Latest Version
v1.80.7 source code.tar.gz (1.6 MB)
Get an email when there's a new version of Evolver
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| evolver-windows-x64.exe.sha256 | 2026-05-07 | 90 Bytes | |
| SHA256SUMS.txt | 2026-05-07 | 432 Bytes | |
| evolver-windows-x64.exe | 2026-05-07 | 120.3 MB | |
| evolver-linux-arm64.sha256 | 2026-05-07 | 86 Bytes | |
| evolver-darwin-x64 | 2026-05-07 | 70.9 MB | |
| evolver-darwin-x64.sha256 | 2026-05-07 | 85 Bytes | |
| evolver-linux-arm64 | 2026-05-07 | 104.0 MB | |
| evolver-linux-x64.sha256 | 2026-05-07 | 84 Bytes | |
| evolver-darwin-arm64 | 2026-05-07 | 65.7 MB | |
| evolver-darwin-arm64.sha256 | 2026-05-07 | 87 Bytes | |
| evolver-linux-x64 | 2026-05-07 | 104.5 MB | |
| README.md | 2026-05-07 | 1.4 kB | |
| v1.80.3 source code.tar.gz | 2026-05-07 | 1.6 MB | |
| v1.80.3 source code.zip | 2026-05-07 | 1.7 MB | |
| Totals: 14 Items | 468.7 MB | 0 | |
v1.80.3
Fixes
- proxy: env override no longer undoes a successful secret rotation (#529 follow-up, Bugbot review on PR [#22]).
v1.80.2 introduced an A2A_NODE_SECRET env-vs-store reconciliation that fires whenever the two values disagree. That reconciliation also fired during the verification heartbeat that runs right after hello rotates the secret, silently overwriting the freshly stored secret Z with the stale env value Y. The heartbeat would sign with Y, get a 403, and the proxy slipped back into the exact 30-minute auth loop the original patch fixed.
v1.80.3: as soon as hello persists a hub-supplied fresh secret, the env override is suppressed for the rest of this process. Hub-supplied secrets are always newer than A2A_NODE_SECRET, so this locks in the right side of the conflict. The verification heartbeat now signs with the rotated secret as intended.
New regression test in test/lifecycleStaleNodeSecret.test.js covers the exact path Bugbot flagged (env=Y, store=X stale, rotate to Z, verification heartbeat must use Z).
Recommendation
If you are running v1.80.2 in proxy mode, please upgrade. v1.80.2 still fixes the original cold-start case, but if a stale A2A_NODE_SECRET was set and the hub triggered a rotation later, the heartbeat afterwards could silently revert. v1.80.3 closes that window.
