Security advisories
2 published for Aider, from the GitHub Advisory Database.
Affects up to 0.86.2 · CVE-2026-10175 · May 31, 2026
Affects up to 0.86.2 · CVE-2026-10177 · May 31, 2026
Release signals
Added support for all GPT-5 models.
- Added support for Grok-4 via `xai/grok-4` and `openrouter/x-ai/grok-4` model names.
- Added support for `gemini/gemini-2.5-flash-lite-preview-06-17` model, by Tamir Zahavi-Brunner.
- `/clear` now prints “All chat history cleared.” so you know it worked, by Zexin Yuan.
- `/undo` output now shows only the first line of each commit message, making it easier to read.
- Added support for `openrouter/moonshotai/kimi-k2` model, by Jack Harrington.
- Display model announcements with no-arg `/model` command.
- +4 more changes
Read the full release noteHide the full release note
-
Added support for all GPT-5 models.
-
Added support for Grok-4 via
xai/grok-4andopenrouter/x-ai/grok-4model names. -
Added support for
gemini/gemini-2.5-flash-lite-preview-06-17model, by Tamir Zahavi-Brunner. -
/clearnow prints “All chat history cleared.” so you know it worked, by Zexin Yuan. -
/undooutput now shows only the first line of each commit message, making it easier to read. -
Added support for
openrouter/moonshotai/kimi-k2model, by Jack Harrington. -
Display model announcements with no-arg
/modelcommand. -
Fixed an issue where new settings for an existing model didn't replace the old ones, by Andrew Grigorev.
-
Fixed analytics to support the latest PostHog SDK event-capture API.
-
Bumped dependencies to pick up latest litellm==1.75.0.
-
Aider wrote 88% of the code in this release.
Enforced diff edit format for GPT-5 models.
- Added support for the reasoning_effort setting for GPT-5 models.
- Fixed model detection to correctly apply GPT-5 settings to versioned names (gpt-5 and gpt-5-2025-08-07).
Added support for openai/gpt-5
- Fixed analytics to support the latest PostHog SDK event-capture API.
- Disabled temperature when using GPT-5 models for more deterministic outputs.
Bumped dependencies to pick up latest litellm==1.75.0.
Primary source ↗Added support for Grok-4 via `xai/grok-4` and `openrouter/x-ai/grok-4` model names.
- Added support for `gemini/gemini-2.5-flash-lite-preview-06-17` model, by Tamir Zahavi-Brunner.
- `/clear` now prints “All chat history cleared.” so you know it worked, by Zexin Yuan.
- `/undo` output now shows only the first line of each commit message, making it easier to read.
- Fixed an issue where new settings for an existing model didn't replace the old ones, by Andrew Grigorev.
- Added support for `openrouter/moonshotai/kimi-k2` model, by Jack Harrington.
Display model announcements with no-arg `/model` command.
Primary source ↗Added support for new Gemini models including `gemini-2.5-pro`, `gemini-2.5-flash`, and `gemini-2.5-pro-preview-06-05` with thinking tokens support.
- Updated model aliases: `flash` now points to `gemini-2.5-flash` and `gemini` now points to `gemini-2.5-pro`.
- Support for Responses API models like o1-pro, o3-pro.
- Added support for OpenAI o3-pro model across multiple providers.
- Enhanced thinking tokens support: can now be disabled by setting to 0, and improved help text with examples.
- Increased max tokens for Deepseek models to 65536 for better performance.
- Updated pricing for o3.
- +19 more changes
Read the full release noteHide the full release note
New Models
- Added support for new Gemini models including
gemini-2.5-pro,gemini-2.5-flash, andgemini-2.5-pro-preview-06-05with thinking tokens support. - Updated model aliases:
flashnow points togemini-2.5-flashandgemininow points togemini-2.5-pro. - Support for Responses API models like o1-pro, o3-pro.
- Added support for OpenAI o3-pro model across multiple providers.
- Enhanced thinking tokens support: can now be disabled by setting to 0, and improved help text with examples.
- Increased max tokens for Deepseek models to 65536 for better performance.
- Updated pricing for o3.
New Features & Enhancements
- Added
--add-gitignore-filesflag to enable adding files listed in .gitignore to Aider's editing scope, by omarcinkonis. - Co-authored-by attribution is now enabled by default for commit messages.
- Enhanced commit message generation to use system prompt prefixes, by Luke Reeves.
- Added
--commit-languageoption to specify the language for commit messages, by Kyosuke Takayama. - Skip expensive file tracking operations when
--skip-sanity-check-repois enabled for better performance, by Makar Ivashko.
Excerpt ends here — this release continues at the source ↗.
Added support for new Claude models including the Sonnet 4 and Opus 4 series (e.g., `claude-sonnet-4-20250514`,
- `claude-opus-4-20250514`) across various providers.
- The default `sonnet` and `opus` aliases were updated to these newer
- versions.
- Added support for the `vertex_ai/gemini-2.5-flash-preview-05-20` model.
- Updated default OpenRouter models during onboarding to `deepseek/deepseek-r1:free` for the free tier and
- `anthropic/claude-sonnet-4` for paid tiers.
- Automatically refresh GitHub Copilot tokens when used as OpenAI API keys, by Lih Chen.
- +10 more changes
Read the full release noteHide the full release note
Model support & provider updates
- Added support for new Claude models including the Sonnet 4 and Opus 4 series (e.g.,
claude-sonnet-4-20250514,claude-opus-4-20250514) across various providers. The defaultsonnetandopusaliases were updated to these newer versions. - Added support for the
vertex_ai/gemini-2.5-flash-preview-05-20model. - Updated default OpenRouter models during onboarding to
deepseek/deepseek-r1:freefor the free tier andanthropic/claude-sonnet-4for paid tiers. - Automatically refresh GitHub Copilot tokens when used as OpenAI API keys, by Lih Chen.
Core functionality improvements
- Fixed an issue where files explicitly added via the command line were not correctly ignored if listed in
.gitignore. - Improved automatic commit messages by providing more context during their generation, by wangboxue.
- Fixed OpenRouter token cost calculation for improved accuracy.
Quality of life improvements
- Improved OpenRouter model metadata handling by introducing a local cache, increasing reliability and performance.
- Added shell tab completion for file path arguments (by saviour) and for
--edit-format/--editor-edit-formatoptions.
Excerpt ends here — this release continues at the source ↗.
Bumped configargparse to 1.7.1 as 1.7 was pulled.
- Added shell tab completion for file path arguments (by saviour) and for `--edit-format`/`--editor-edit-format` options.
- Improved OpenRouter model metadata handling by introducing a local cache, increasing reliability and performance.
- The `/settings` command now displays detailed metadata for active main, editor, and weak models.
- Fixed an issue where files explicitly added via the command line were not correctly ignored if listed in `.gitignore`.
- +1 more change
Improved user language detection by correctly normalizing hyphenated language codes (e.g., `en-US` to `en`) and enhancing the validation of locale results.
- Prevented Aider from instructing the LLM to reply in 'C' or 'POSIX' when these are detected as the system locale.
- Displayed a spinner with the model name when generating commit messages.
Added support for `gemini-2.5-pro-preview-05-06` models.
- Added support for `qwen3-235b` models.
- Added repo-map support for OCaml and OCaml interface files, by Andrey Popp.
- Added a spinner animation while waiting for the LLM to start streaming its response.
- Updated the spinner animation to a Knight Rider style.
- Introduced `--attribute-co-authored-by` option to add co-author trailer to commit messages, by Andrew Grigorev.
- Updated Gemini model aliases (e.g., `gemini`, `gemini-2.5-pro`) to point to the `05-06` preview versions.
- +27 more changes
Read the full release noteHide the full release note
- Added support for
gemini-2.5-pro-preview-05-06models. - Added support for
qwen3-235bmodels. - Added repo-map support for OCaml and OCaml interface files, by Andrey Popp.
- Added a spinner animation while waiting for the LLM to start streaming its response.
- Updated the spinner animation to a Knight Rider style.
- Introduced
--attribute-co-authored-byoption to add co-author trailer to commit messages, by Andrew Grigorev. - Updated Gemini model aliases (e.g.,
gemini,gemini-2.5-pro) to point to the05-06preview versions. - Marked Gemini 2.5 Pro preview models as
overeagerby default. - Commit message prompt specifies the user's language.
- Updated the default weak model for Gemini 2.5 Pro models to
gemini/gemini-2.5-flash-preview-04-17. - Corrected
gemini-2.5-pro-exp-03-25model settings to reflect its lack of support forthinking_budget. - Ensured model-specific system prompt prefixes are placed on a new line before the main system prompt.
- Added tracking of total tokens sent and received, now included in benchmark statistics.
Excerpt ends here — this release continues at the source ↗.
Add support for `gemini-2.5-flash-preview-04-17` models.
- Improved robustness of edit block parsing when filenames start with backticks or fences.
- Add new `udiff-simple` edit format, for Gemini 2.5 Pro.
- Update default weak/editor models for Gemini 2.5 Pro models to use `gemini-2.5-flash-preview-04-17`.
- Instruct models to reply in the user's detected system language.
- Fix parsing of diffs for newly created files (`--- /dev/null`).
- Add markdown syntax highlighting support when editing multi-line commit messages via `/commit`, by Kay Gosho.
- +3 more changes
Read the full release noteHide the full release note
- Add support for
gemini-2.5-flash-preview-04-17models. - Improved robustness of edit block parsing when filenames start with backticks or fences.
- Add new
udiff-simpleedit format, for Gemini 2.5 Pro. - Update default weak/editor models for Gemini 2.5 Pro models to use
gemini-2.5-flash-preview-04-17. - Instruct models to reply in the user's detected system language.
- Fix parsing of diffs for newly created files (
--- /dev/null). - Add markdown syntax highlighting support when editing multi-line commit messages via
/commit, by Kay Gosho. - Set Gemini 2.5 Pro models to use the
overeagerprompt setting by default. - Add common file types (
.svg,.pdf) to the default list of ignored files for AI comment scanning (--watch). - Skip scanning files larger than 1MB for AI comments (
--watch).
Fix editing shell files with diff-fenced, by zjy1412.
- Improve robustness of patch application by allowing multiple update/delete actions for the same file within a single response.
- Update prompts to instruct LLMs to consolidate all edits for a given file into a single block within the patch.
Added support for `o3` and `o4-mini` including provider-specific versions for OpenAI, OpenRouter, and Azure.
- Added support for Azure specific `gpt-4.1` and `gpt-4.1-mini` models.
- Disabled streaming for `o3` models since you need identity verification to stream.
- Fixed handling of file paths in unified diffs, especially those generated by git.
Polled sources
[github-releases] GitHub Releases
GitHub Releases · last read Oct 24, 2026
https://github.com/Aider-AI/aider/releases[history-md] HISTORY.md
Changelog · last read Oct 24, 2026
https://raw.githubusercontent.com/Aider-AI/aider/main/HISTORY.md[official-history] Aider release history site
Product page · last read Oct 24, 2026
https://aider.chat/HISTORY.html