This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryUpdates Bug Fixes, fix, and New Features across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Keeps file and coding tool searches contained to the configured root. Keeps file and coding tool searches contained to the configured root. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Security | Medium |
Prevents symlinked files from escaping the agent directory in Antigravity. Prevents symlinked files from escaping the agent directory in Antigravity. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Medium |
Adds ValkeyDb as a fast in-memory database. Adds ValkeyDb as a fast in-memory database. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Medium |
Adds ValkeyDB vector store with vector and keyword search. Adds ValkeyDB vector store with vector and keyword search. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Medium |
Adds RedmineTools for managing issues, comments, and time logs. Adds RedmineTools for managing issues, comments, and time logs. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Medium |
Adds TokenLab as an OpenAI‑compatible model provider. Adds TokenLab as an OpenAI‑compatible model provider. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Low |
Extends human-in-the-loop confirmation, input, and feedback to AG-UI. Extends human-in-the-loop confirmation, input, and feedback to AG-UI. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Surfaces a clean error when an MCP server becomes unreachable. Surfaces a clean error when an MCP server becomes unreachable. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Supports tools that respond with only structuredContent. Supports tools that respond with only structuredContent. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Adds frequency_penalty, presence_penalty, and stop parameters to Mistral, preserving zero-valued params like temperature=0. Adds frequency_penalty, presence_penalty, and stop parameters to Mistral, preserving zero-valued params like temperature=0. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Feature | Low |
Includes metrics on WorkflowCompletedEvent. Includes metrics on WorkflowCompletedEvent. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Performance | Low |
Skips redundant model call when saving session context. Skips redundant model call when saving session context. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes DoclingReader to accept local file‑path strings. Fixes DoclingReader to accept local file‑path strings. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes JSONReader to honor `chunk=False` when reading documents. Fixes JSONReader to honor `chunk=False` when reading documents. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes PDFReader's incorrect page‑number interpretation for single‑page PDFs. Fixes PDFReader's incorrect page‑number interpretation for single‑page PDFs. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes PDFReader to auto‑try a blank password for encrypted PDFs. Fixes PDFReader to auto‑try a blank password for encrypted PDFs. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes Timer.elapsed for very fast operations. Fixes Timer.elapsed for very fast operations. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes Cassandra to derive vector dimension from the configured embedder instead of hardcoding 1024. Fixes Cassandra to derive vector dimension from the configured embedder instead of hardcoding 1024. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Low |
Improves reliability of memory and profile extraction from conversations. Improves reliability of memory and profile extraction from conversations. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Reliably parses structured outputs whose field values contain braces. Reliably parses structured outputs whose field values contain braces. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
| Bugfix | Low |
Fixes failing searches in YouTools and adds region, language, and freshness filters. Fixes failing searches in YouTools and adds region, language, and freshness filters. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
Changelog
New Features:
- Valkey:
- Redmine Tools: Added
RedmineToolsto manage issues, comments, and time logs in Redmine, an open source project management tool. - TokenLab: Added
TokenLabas a new OpenAI-compatible model provider.
Improvements:
- Session Context: Skip a redundant model call when saving session context.
- AG-UI: Extended human-in-the-loop confirmation, input, and feedback to AG-UI.
- User Memory & Profile: More reliable memory and profile extraction from conversations.
- MCP Tools:
- Surface a clean error when an MCP server becomes unreachable.
- Support tools that respond with only
structuredContent.
Bug Fixes:
- DoclingReader: Accept local file-path strings.
- JSONReader: Honor
chunk=Falsewhen reading JSON documents. - PDFReader:
- Fix incorrect page number interpretation for single page pdf’s.
- Auto-try a blank password for encrypted PDFs.
- Structured Outputs: Reliably parse responses whose field values contain braces.
- File & Coding Tools: Keep search and listing contained to the configured root.
- Antigravity: Prevent symlinked files from escaping the agent directory.
- Cassandra: Derive the vector dimension from the configured embedder.
- Mistral: Add
frequency_penalty,presence_penalty, andstop, and keep zero-valued params liketemperature=0. - YouTools: Fix failing searches and add region, language, and freshness filters.
- Workflow Metrics: Include metrics on
WorkflowCompletedEvent. - Timer: Fix
Timer.elapsedfor very fast operations.
What's Changed
- cookbook: improve AG-UI cookbooks with db persistence and better README by @Mustafa-Esoofally in https://github.com/agno-agi/agno/pull/8867
- fix: skip symlinked Antigravity agent sources by @Success6666 in https://github.com/agno-agi/agno/pull/8721
- fix: include metrics in workflow completed events by @anuragts in https://github.com/agno-agi/agno/pull/8866
- fix: keep root searches contained by @Success6666 in https://github.com/agno-agi/agno/pull/8719
- fix: surface MCP structuredContent-only results by @Success6666 in https://github.com/agno-agi/agno/pull/8695
- fix: DoclingReader accepts local file path string by @sannya-singal in https://github.com/agno-agi/agno/pull/8877
- fix: honor JSONReader's
chunk=Falseby @sannya-singal in https://github.com/agno-agi/agno/pull/8882 - fix: derive Cassandra vector dimension from embedder instead of hardcoding 1024 by @wvwoo in https://github.com/agno-agi/agno/pull/8890
- [feat] Add TokenLab model provider by @hedging8563 in https://github.com/agno-agi/agno/pull/8833
- feat: human-in-the-loop confirmation and user input over AG-UI by @Mustafa-Esoofally in https://github.com/agno-agi/agno/pull/8837
- feat: add Valkey support (storage db + vector db) by @atao2004 in https://github.com/agno-agi/agno/pull/8141
- fix: expose missing search params and fix livecrawl enums in YouTools by @anshul-jain-devx108 in https://github.com/agno-agi/agno/pull/8906
- fix: PDFReader strips leading digits from single-page PDFs as page numbers by @sannya-singal in https://github.com/agno-agi/agno/pull/8909
- fix: auto-try blank password for encrypted PDFs by @GaelReinaudi in https://github.com/agno-agi/agno/pull/5160
- fix: avoid redundant session context model calls by @dexhunter in https://github.com/agno-agi/agno/pull/8907
- fix: skip JSON string literals when counting brace depth in _extract_json_objects by @Diwak4r in https://github.com/agno-agi/agno/pull/8829
- fix: Timer.elapsed no longer recomputes live when elapsed_time is 0.0 by @chuenchen309 in https://github.com/agno-agi/agno/pull/8923
- fix: surface a clean tool error when the MCP server dies mid-call by @sannya-singal in https://github.com/agno-agi/agno/pull/8928
- [cookbook] Add ScyllaDB vector store example by @zseta in https://github.com/agno-agi/agno/pull/8932
- refactor: reduce ShellTools hardening to docs and existing confirmation API by @nolanchic in https://github.com/agno-agi/agno/pull/8854
- feat: add Redmine tools by @mauricio-porto in https://github.com/agno-agi/agno/pull/3841
- fix: frame transcript in UserProfile/UserMemory extraction prompts by @Purvi09 in https://github.com/agno-agi/agno/pull/8899
- fix: forward supported sampling params and stop dropping zero values by @ly-wang19 in https://github.com/agno-agi/agno/pull/8389
- chore: Release v2.7.3 by @harshsinha03 in https://github.com/agno-agi/agno/pull/8929
New Contributors
- @wvwoo made their first contribution in https://github.com/agno-agi/agno/pull/8890
- @hedging8563 made their first contribution in https://github.com/agno-agi/agno/pull/8833
- @atao2004 made their first contribution in https://github.com/agno-agi/agno/pull/8141
- @GaelReinaudi made their first contribution in https://github.com/agno-agi/agno/pull/5160
- @dexhunter made their first contribution in https://github.com/agno-agi/agno/pull/8907
- @Diwak4r made their first contribution in https://github.com/agno-agi/agno/pull/8829
- @chuenchen309 made their first contribution in https://github.com/agno-agi/agno/pull/8923
- @zseta made their first contribution in https://github.com/agno-agi/agno/pull/8932
- @nolanchic made their first contribution in https://github.com/agno-agi/agno/pull/8854
- @mauricio-porto made their first contribution in https://github.com/agno-agi/agno/pull/3841
- @Purvi09 made their first contribution in https://github.com/agno-agi/agno/pull/8899
Full Changelog: https://github.com/agno-agi/agno/compare/v2.7.2...v2.7.3
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]