Rea

From the release notes

6.1.0 (2026-10-09) ⚠ BREAKING CHANGES hopper: Hopper regex mode uses ECMAScript Unicode syntax instead of Python re. Matching runs in a cancellable worker with a five-second deadline; literal mode keeps Unicode casefold matching. hopper: remove set_current_document. Use open_binary to switch targets; document arguments are scoped to the active target. Features clients: register Grok Build and Grok Bot during setup (#1134) (08561e0) ghidra: make the startup deadline configurable (#974) (d84bc8f) website: add GitHub link with live star count (2f59287) Bug Fixes analysis: bind overview document identity to the active target (#1094) (81b5104) analysis: resolve procedure identities and preserve literal queries (d830cb7) android: report actual provider readiness (c715af8) android: report startup and selector failure causes (6c13fc8) apple: account for repeated archive projections (e1df5e8) apple: budget Interface Builder decoding and projection (dbcf8c3) apple: classify empty dyld settings by consumer semantics (#1110) (fe297e5) apple: decode bundle plist bytes before executable lookup (d575a73) apple: decode Interface Builder XML byte encodings (#1095) (f8e143a) apple: derive dispatch coverage from located decode facts (488f448) apple: keep skipped catalog entries from reading as absence (a079af2) apple: report apps without asset catalogs as empty inventories (e2f0378) apple: report apps without asset catalogs as empty inventories (79e5a39) apple: report missing keyed archive hierarchy references (#1104) (3b2ec69) apple: validate dylib candidates and preserve search uncertainty (#1100) (7914e36) apple: validate physical slices and dylib platform compatibility (15f92f2) application: budget bridge candidate projection by bytes (3d450a2) artifacts: preserve keyed archive integer precision (4034883) artifacts: report keyed-archive selection mistakes as invalid input (5a55d5b) artifacts: report keyed-archive selection mistakes as invalid input (25fb6d3) artifacts: retain failed DMG cleanup state and diagnostics (#1103) (4bb056b) browser: advertise zero-based units for runtime source coordinates (#1085) (6218d28) browser: bind correlated replies to their selected session (96d3caf) browser: bound aggregate source-map decoding before expansion (f983c71) browser: bound script metadata and preserve omissions (faf209e) browser: bound source-map fetches and retain predecessor requests (eaf5734) browser: compose nested source-map column offsets (#1109) (8b08ec0) browser: keep initiator callsites out of script coordinate guidance (#1096) (3c157b4) browser: normalize selected script manifest roots on Windows (#1078) (b49beb4) browser: preserve captures when response bodies are unavailable (96af2fa) browser: preserve command failures and reject malformed replies (6b92002) browser: treat module-import initiator positions as script positions (ae0630a) browser: treat module-import initiator positions as script positions (99d31ee)

From the release notes

6.0.0 (2026-10-08) ⚠ BREAKING CHANGES contracts: MCP filesystem inputs now require absolute host paths, including target/snapshot paths, evidence bundle paths, managed and firmware inputs, browser/Electron launch paths and expected server paths. Calls such as open_binary({"path":"./app"}) must send an absolute path such as /home/analyst/app or C:\analysis\app. Optional paths remain optional. CLI operator-relative paths continue to work. See #948 and #1004. Features artifacts: trace Mach-O dylib resolution in bundles (78d594c) browser: inspect historical web network captures (#992) (2bf3663) evm: inspect offline bytecode interfaces through EVMole (#1051) (7af7bc8) ghidra: support native x86 PE applications on Windows (#1030) (c6dad93) native: inspect offline ELF layout through pwntools (#1037) (4fc6565) native: inspect recorded crashes through pwntools and pwndbg (#1054) (163ee09) native: observe function and Objective-C method calls under LLDB (1d13cef) Bug Fixes dotnet: validate managed metadata and CIL boundaries (#938) (bda4ada) build: clarify generated-file check hint and drop redundant catalog step (#998) (6f0ef16) release: extend npm propagation window and improve diagnostics (#943) (06b047a) contracts: require absolute local paths for session filesystem inputs (#948) (5b172b1) ci: generate source catalog before shard tests (#1002) (eb8f649) contracts: require absolute local paths for remaining caller-supplied file inputs (#1004) (cbc0dd1) cli: classify ENOTDIR JSON input failures (#1000) (a6132be) browser: preserve authorized redirect hops (#986) (ae0f725) mcp: reject unknown MCP tool inputs (#975) (fe64fd6) release: publish from explicit source checkpoints (#1003) (64c7188) release: publish from explicit source checkpoints (#1006) (b4fc0ec) javascript: bound semantic node projection for resource safety (#966) (96a46ad) ci: avoid slow Azure archive for the native cross compiler (#1016) (51956c1) ci: decouple stdio smoke tests from Linux display probes (#1014) (93731e1) cli: stream large JavaScript JSON results (#1024) (0e25bef) javascript: complete large-ASAR analysis with file-local projection (#1055) (b9fb438) javascript: recognize digits in artifact URI schemes (#1045) (03424ae) javascript: reconstruct HTML script loads accurately (#1042) (1154f2f) javascript: report application analysis progress on the CLI (#1008) (7b18c58) javascript: resolve module URLs and reject invalid exports targets (#1031) (8d5c88f) javascript: resolve root package exports arrays (#1046) (53409ab) mcp: advertise JSON values without recursive schemas (#995) (7425f70), closes #919 mcp: bound capture comparison input schema depth (#1005) (6b55de0) process: preserve partial evidence and verify detached cleanup (#1011) (63cf28f) release: support built-in credentials and refresh release boundary (6a278a6) release: support default credentials and record 5.0.0 boundary (#1012) (6a278a6) release: sync 5.0.0 checkpoint back to main (

From the release notes

5.0.0 (2026-10-07) ⚠ BREAKING CHANGES native: preserve incomplete native UI captures (#991) android: Android analysis now requires a full JDK 17 or newer with its compiler module for the packaged Java source bridge. Features apple: project macOS bundle anatomy in application graphs (88c940b) apple: project macOS bundle anatomy in application graphs (dd3e7ae) application: wire Android and Apple inventory graph tools (#852) (e0fd820) browser: attribute native execution and listener sources (#917) (b5afa5f) browser: capture correlated network content and lifecycle evidence (#797) (f9eaf05) browser: trace captured website module imports (#879) (01be082) browser: trace captured website source-map locations (#897) (f430c41) javascript: recover readable modules with Wakaru (#848) (166dcd2) native: decode chained fixups, binds, ObjC categories and properties (a657557) native: decode chained fixups, binds, ObjC categories and properties (3e24a72) native: open iOS-style and iOS-on-Mac wrapper app bundles (2ed89e6) native: open iOS-style and iOS-on-Mac wrapper app bundles (aeebba3) web: export captured scripts for JavaScript application analysis (#801) (472b72a) website: add a shared back-to-top link (5047373) website: introduce REA and the DX-Ball reconstruction (#906) (4e3953c) Bug Fixes address review nits from batch integration follow-ups (#818) (5a0e0ba) android: align runtime suffix inference (#977) (fb3749a) android: bound fragmented JADX MCP frame memory (#937) (9e39795) android: preserve JVM settings and reuse metadata sessions (#908) (eab34a9) apple: attribute only application-root components in macOS inventories (5524970) apple: count only real framework version directories (2e81e86) apple: pair bridge hypotheses within one application root (7acf4e7) apple: pair bridge hypotheses within one application root (9226ade) apple: traverse keyed archive hierarchy collections (#976) (71ac83f) artifacts: accept APFS image disks ejected with their container (d93ebec) artifacts: accept APFS image disks ejected with their container (b72c079) artifacts: accept the bundle subject when extracting an app bundle (#891) (37d2eba) artifacts: decode flat keyed-archive NIBs with data and shared references (b3f013f) artifacts: decode flat keyed-archive NIBs with data and shared references (2a4667b) artifacts: harden reader lifecycle boundaries (#951) (2366bda) artifacts: keep the post-snapshot detach check out of provenance (62634e4) artifacts: preserve reader failure diagnostics (#987) (fc4a9a0) artifacts: project compiled AppKit actions from the control to its target (b08228d) artifacts: project compiled AppKit actions from the control to its target (#905) (900d7c8) artifacts: project UIKit runtime outlet and event connections (aa8082e) artifacts: project UIKit runtime outlet and event connections (8b24387) artifacts: read AppKit connectors from flat keyed-archive NIBs (#900) (27c272b) artifacts: read keyed archive dictiona