chore(main): release 1.27.0

[openhands-release-bot]

🤖 I have created a release beep boop

1.27.0 (2026-06-24)

What's Changed

Other Changes

• fix(ci): patch ws advisory and scope security audit to production deps by @VascoSch92 in fix(ci): patch ws advisory and scope security audit to production deps #215
• feat(FileClient): forward include_hidden to /api/file/home and /search_subdirs by @xingyaoww in feat(FileClient): forward include_hidden to /api/file/home and /search_subdirs #217
• Add LLM subscription client methods by @neubig in Add LLM subscription client methods #178
• chore: bump agent-server image pin to 1.29.0 by @VascoSch92 in chore: bump agent-server image pin to 1.29.0 #214
• refactor(client): remove dead endpoint clients (security, unset-provider-tokens, generate_title) by @VascoSch92 in refactor(client): remove dead endpoint clients (security, unset-provider-tokens, generate_title) #224
• ci: add endpoint-audit workflow (report-only) on main by @VascoSch92 in ci: add endpoint-audit workflow (report-only) on main #227
• feat(client): add /goal start, stop, and resume conversation endpoints by @VascoSch92 in feat(client): add /goal start, stop, and resume conversation endpoints #228
• refactor(client): remove dead ApiKeysClient and SessionClient (keys + accept_tos) by @VascoSch92 in refactor(client): remove dead ApiKeysClient and SessionClient (keys + accept_tos) #225
• ci: release automation via release-please (release-actions) by @VascoSch92 in ci: release automation via release-please (release-actions) #230

Full Changelog: v1.26.0...v1.27.0

---

This PR was generated with Release Please. See documentation.

[github-actions]

Endpoint audit

❌ 8 off-contract call(s) — not on the agent-server · classifiers: cloud

Category	Count
❌ Off-contract (not on agent-server)	8
⛔ no known backend	7
↗️ served by cloud	1
➕ Missing API (agent-server has, client lacks)	9
agent-server endpoints	104
client endpoints	101

❌ Not on agent-server (gated, 8)

⛔ (no known backend) — served by no backend we can see (7)

• DELETE /api/meta-profiles/{}
• GET /api/meta-profiles
• GET /api/meta-profiles/{}
• POST /api/cloud-proxy
• POST /api/meta-profiles/{}
• POST /api/meta-profiles/{}/activate
• POST /api/skills/installed/{}/update

↗️ served by cloud (1)

• GET /api/shared-events/search

➕ Missing API — agent-server exposes it, client does not implement (9)

• GET /
• GET /api/bash/bash_events
• GET /api/conversations
• GET /api/conversations/{}/events
• GET /api/conversations/{}/workspace
• GET /api/conversations/{}/workspace/{}
• GET /api/init
• POST /api/init
• POST /api/skills/installed/{}/refresh

[openhands-release-bot]

🤖 Created releases:

• v1.27.0

🌻