{"repo":"NousResearch/hermes-agent","public_id":"62935","display_label":"Teams SDK import leaks dotenv into gateway processes","summary":"A bug where importing the Microsoft Teams SDK at import time loads .env files as a side effect, polluting environment variables across gateway processes and breaking secret isolation. Two fix attempts address suppressing this behavior without clearing existing environment state.","subsystem":"gateway","counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":76438,"merged_at":"2026-08-01T22:34:20+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-08-01T22:34:20+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":62935,"pr_number":76438,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-08-01T22:34:20+00:00"}],"members":[{"kind":"issue","number":62935,"title":"[Bug]: microsoft-teams-apps import side effect loads foreign .env into every gateway process — breaks profile secret isolation","url":null,"state":"closed"},{"kind":"pr","number":62947,"title":"fix(teams): suppress SDK import-time dotenv without clearing environ","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"eec6d3efde","number":0},{"kind":"commit","value":"a98c8eeed1","number":0},{"kind":"pr","value":"#76438","number":76438}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":76438,"title":"fix(teams): suppress SDK import-time dotenv leak (salvage #62947)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["plugins/platforms/teams/adapter.py","tests/gateway/test_teams.py","tests/gateway/test_teams_dotenv_isolation.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}