chore(release): prepare 0.40.0

[elkaix]

Bump version to 0.40.0, cut the 0.40.0 CHANGELOG/breaking-changes blocks, and refresh release-asset references across README and the linux-installer docs.

What's in this release

• Alibaba login: plan-key routing fixed, live model discovery, qwen3.7-plus default. Token Plan keys (sk-sp-, sk-tok-, sk-ws-) now route to the correct endpoint. Model discovery no longer filters to a hardcoded allowlist. First-login default is qwen3.7-plus.
• Qwen3.x models always-thinking on both Alibaba plans. Carries always_thinking capability on Model Studio and OpenCode Go plans.
• Web: same-origin WebSockets, synced version banner, token bootstrap fix. Empty allowed-origin list no longer rejects all WS connections with 403.
• Security, correctness, and multi-instance hardening. Permission gate closes awk-pipe and xargs -L N bypasses; per-session writer locks; locked metadata read-modify-write; JSONL torn-line repair; OAuth refresh lifetime fix.
• Thinking effort: single top-right label, neutral border. Hidden for always-thinking and non-thinking models.
• TUI refinements and agent prompt overhaul. Adaptive background probe, unified todo renderer, elapsed/tokens/t-s status line.
• Breaking: pythinker web/pythinker vis host flag -h renamed to -H.

Files changed

• pyproject.toml + uv.lock: version bump 0.39.0 → 0.40.0
• CHANGELOG.md: Unreleased consumed into ## 0.40.0 (2026-06-10), Unreleased reset
• docs/en/release-notes/changelog.md: mirrored 0.40.0 block
• docs/en/release-notes/breaking-changes.md: -H flag migration note
• README.md: "What's New in 0.40.0" + all version refs bumped
• docs/en/guides/getting-started.md: installer filename bumped
• packages/linux-installer/README.md: all version refs bumped

Summary by CodeRabbit

• Chores

  • Version bump to 0.40.0 with updated installer references and release documentation.

• Documentation

  • Updated release notes, changelog, and getting-started guides for 0.40.0.
  • Documented breaking change: CLI host flag renamed from -h to -H; -h now serves as help alias.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 9b5eab24-3d9d-4086-ba1f-a3fbe683367f

📥 Commits

Reviewing files that changed from the base of the PR and between c819e4b and 32ef417.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (7)

• CHANGELOG.md
• README.md
• docs/en/guides/getting-started.md
• docs/en/release-notes/breaking-changes.md
• docs/en/release-notes/changelog.md
• packages/linux-installer/README.md
• pyproject.toml

---

📝 Walkthrough

Walkthrough

Version 0.40.0 release preparation: project version bumped from 0.39.0 to 0.40.0 in pyproject.toml, with comprehensive documentation updates across changelog, release notes, breaking-change notices, and all installation guides (README, getting-started, Linux installer).

Changes

Release 0.40.0 Preparation

Layer / File(s)	Summary
Project version bump and changelog entry pyproject.toml, CHANGELOG.md	Version in [project] metadata updated from 0.39.0 to 0.40.0; CHANGELOG.md receives new 0.40.0 release heading and upgrade instructions under Unreleased.
Release notes and breaking changes documentation docs/en/release-notes/breaking-changes.md, docs/en/release-notes/changelog.md	New breaking-change entry documents the CLI host flag rename from -h to -H; detailed release notes added under 0.40.0 with feature descriptions, security updates, and upgrade guidance.
Installation and getting-started guides README.md, docs/en/guides/getting-started.md	README "What's New in 0.40.0" section replaces prior release; Windows Quick Start and native installer sections, Linux system-package commands with .deb/.rpm artifacts, and sha256sum -c verification filenames updated to 0.40.0; getting-started.md Windows download link updated.
Linux installer build and deployment documentation packages/linux-installer/README.md	End-user install section updated with 0.40.0 package download URLs, checksums, and dpkg/apt-get/dnf/zypper commands; build section updated with script argument, output artifact filenames, and cargo-dist tarball version references.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• Pythoughts-labs/pythinker-code#83: Release-prep version bump updating CHANGELOG.md, README.md, release notes, Linux installer README, and pyproject.toml for a new release.
• Pythoughts-labs/pythinker-code#74: Release-prep chore bumping pyproject.toml version and rewriting CHANGELOG.md, README.md, docs, and Linux installer README for new release artifacts.
• Pythoughts-labs/pythinker-code#59: Release version-bump housekeeping updating pyproject.toml and related installer/upgrade references in README and CHANGELOG.

Suggested labels

dependencies

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	Description is comprehensive with clear release notes, files changed, and feature summaries, but does not follow the provided template structure with required sections.	Consider restructuring to match template: add Related Issue section (or note if none), use formal Description section header, and complete the checklist items to confirm all required steps were performed.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	Title follows conventional commits format (chore(release): prepare 0.40.0) and accurately describes the release preparation changes across the codebase.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/0.40.0

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!