Kiro CLI — October 2026 Releases
10 releases in October 2026.
What's new in Kiro CLI, October 2026
Kiro CLI adds V3 Memory, workspace trust and Approve for me
Kiro CLI's October 2026 changes centered on V3: Memory for local sessions, workspace trust, and an Approve for me permission mode. Ten releases shipped, from v2.27.0 to v2.37.0.
On safety and permissions, v2.33.0 asks you to trust a folder before loading its hooks, agents, MCP servers, steering, workflows or language server configuration, so a cloned repository cannot change agent behavior on its own. v2.36.0 adds Approve for me, which approves routine actions, blocks risky ones and asks when unsure, with existing deny, ask and allow rules deciding first. v2.35.0 warns when Kiro starts as root or Administrator.
On workflow, v2.27.0 added a Workflows: sub-agent tool setting, [[folder:...]] Steering references and saved prompts as slash commands. v2.29.0 introduced Memory, and v2.34.0 added deletion from /memories. v2.31.0 and v2.37.0 render Mermaid diagrams in chat, and v2.37.0 turns on automatic V2 agent upgrades by default. The rest were fixes for model fallback, MCP sign-in, fullscreen and Windows setup.
- Workspace trust: Kiro CLI asks you to trust a folder before loading its hooks, agents, MCP servers, steering, workflows or language server config (v2.33.0)
- Approve for me approves routine actions, blocks risky ones and asks when unsure; enable it under /permissions (v2.36.0)
- Memory for local V3 sessions carries context like repository commands and conventions into later chats (v2.29.0)
- Memories can be deleted from /memories, and V3 MCP tools can now ask for input (v2.34.0)
- Saved prompts from workspace, global and MCP sources become slash commands in V3 (v2.27.0)
- Mermaid diagrams render in chat, with node shapes and nested subgraphs added later (v2.31.0, v2.37.0)
Upgrading from v2.26.0? See every change through v2.37.0.
- v2.37.0 (October 30, 2026) — This release turns on automatic V2 agent upgrades by default when a V3 session starts and lets ACP clients that declare terminal authentication sign i
- v2.36.0 (October 29, 2026) — This release adds Approve for me to interactive V3 sessions. Kiro approves routine actions for you, blocks risky ones, and asks when unsure, so work n
- v2.35.0 (October 27, 2026) — This release warns you when Kiro CLI starts as root or Administrator and makes V3 sessions follow your organization's MCP and web tools settings. It a
- v2.34.0 (October 23, 2026) — This release lets V3 MCP tools ask for input, gives you more control over Workflows, and lets you delete memories from /memories. It also adds a model
- v2.33.0 (October 21, 2026) — This release adds workspace trust to interactive V3 sessions: Kiro CLI asks you to trust a folder before it loads that folder's hooks, agents, MCP ser
- v2.32.0 (October 15, 2026) — Kiro - the AI IDE for prototype to production
- v2.31.0 (October 14, 2026) — Kiro - the AI IDE for prototype to production
- v2.30.0 (October 12, 2026) — This release shows a startup prompt inviting you to switch to V3 as part of a gradual rollout. It also adds V3 model fallback notices, keeps more of y
- v2.29.0 (October 9, 2026) — Kiro CLI 2.29.0 introduces Memory for local V3 sessions, so Kiro can carry useful context from your work, such as a repository's commands and conventi
- v2.27.0 (October 1, 2026) — Choose how V3 delegates with Workflows, include live file and folder context in Steering, and invoke saved prompts as slash commands.