## Goal Upgrade NemoClaw-managed Hermes from 0.19.0 to 0.20.6 while preserving existing compatibility, security, and rebuild behavior. ## Acceptance criteria - [ ] Runtime pins, compatibility patches, and dependency review are updated. - [ ] The Hermes managed image builds successfully. - [ ] Required Linux CI and canonical E2E tests pass. - [ ] [PR #10595](https://github.com/NVIDIA/NemoClaw/pull/10595) is merged.
Goal
Upgrade NemoClaw-managed Hermes from 0.19.0 to 0.20.6 while preserving existing compatibility, security, and rebuild behavior.
Acceptance criteria