Skip to content

This release fixes issues for SREs watching stability and regressions.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

fastapi kubernetes langgraph llm mlops multi-agent

Affected surfaces

auth

Summary

AI summary

Invalid API key now returns HTTP 502 with actionable error details, and typed pack SSE streams are fixed.

Full changelog

Patch release — launch-audit fixes.

Fixed

  • Invalid API key no longer returns HTTP 200 with degraded content. With a wrong or placeholder ANTHROPIC_API_KEY, the provider's 401 was silently swallowed into placeholder text ("Summary unavailable.", "structured extraction failed") with cost_usd: 0.0. New AgentAuthenticationError now propagates through agents and packs to the API, which returns HTTP 502 with an actionable detail ("Check ANTHROPIC_API_KEY in your .env … or set LLM_PROVIDER=mock"). SSE streams emit the same message as an explicit error event.
  • Same bug, non-auth case. Any other fatal LLM error (persistent 5xx after retries exhausted, a bad model name, a content-policy refusal) was swallowed identically. Every ResearchAgent/AnalystAgent node now lets the LLM call fail loudly — only genuine JSON-parsing hiccups still get a fallback.
  • Typed pack SSE streams (/packs/{id}/run/stream) were broken on the default config. summariser and every StructuredLLMPack vertical drove a sync graph.invoke on the event loop thread, which AsyncSqliteSaver rejects. Fixed via asyncio.to_thread.
  • Stale ANTHROPIC_MODEL default in docs/security.md — documented as the retired claude-3-5-sonnet-20241022; corrected to claude-sonnet-5.

Changed

  • README: new Troubleshooting section, tests badge 758+ → 790+, 422-vs-403 clarification for regulated packs.
  • Remaining French docstrings/comments translated to English.
  • core/cost.py: documented Claude Sonnet 5's introductory pricing window.
  • Dev deps: pip>=26.1.2 pinned (PYSEC-2026-196).

Full Changelog: https://github.com/Brescou/langgraph-agent-stack/compare/v0.6.1...v0.6.2

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Production-grade LangGraph template

Get notified when new releases ship.

Sign up free

About Production-grade LangGraph template

All releases →

Related context

Beta — feedback welcome: [email protected]