This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+12 more
Summary
AI summaryUpdates New packages, https://github.com/CopilotKit/CopilotKit/pull/5339, and https://github.com/CopilotKit/CopilotKit/pull/5314 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds AG-UI A2UIToolParams single‑arg API on @ag-ui 0.0.56. Adds AG-UI A2UIToolParams single‑arg API on @ag-ui 0.0.56. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Low |
Adds @copilotkit/bot family: platform‑agnostic bot engine, JSX UI runtime, Slack adapter. Adds @copilotkit/bot family: platform‑agnostic bot engine, JSX UI runtime, Slack adapter. Source: llm_adapter@2026-06-11 Confidence: low |
— |
| Feature | Low |
Introduces new packages: @copilotkit/bot, @copilotkit/bot-ui, @copilotkit/bot-slack (0.0.1). Introduces new packages: @copilotkit/bot, @copilotkit/bot-ui, @copilotkit/bot-slack (0.0.1). Source: granite4.1:30b@2026-06-11-audit Confidence: low |
— |
| Dependency | Low |
Bumps @ag-ui/* dependencies to version 0.0.56 across all packages. Bumps @ag-ui/* dependencies to version 0.0.56 across all packages. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Scopes A2UI catalog context per agent instead of broadcasting to all runs. Scopes A2UI catalog context per agent instead of broadcasting to all runs. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Makes a single unhealthy MCP server non‑fatal; run continues with healthy servers. Makes a single unhealthy MCP server non‑fatal; run continues with healthy servers. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Threads app‑user IDs through Intelligence thread reads, deletes, and mutations. Threads app‑user IDs through Intelligence thread reads, deletes, and mutations. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Fixes cross‑browser rendering of Intelligence indicator icon (Safari, Firefox). Fixes cross‑browser rendering of Intelligence indicator icon (Safari, Firefox). Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Adapts to @ag-ui/client 0.0.56 runHttpRequest signature change. Adapts to @ag-ui/client 0.0.56 runHttpRequest signature change. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Low |
Repairs type‑checking rot in @copilotkit/shared and a2ui-renderer. Repairs type‑checking rot in @copilotkit/shared and a2ui-renderer. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Low |
Adds Node 25 compatibility shim for localStorage in @copilotkit/web-inspector tests. Adds Node 25 compatibility shim for localStorage in @copilotkit/web-inspector tests. Source: llm_adapter@2026-06-11 Confidence: high |
— |
Full changelog
CopilotKit v1.60.0
A minor release on the 1.60 line. Headline: the new @copilotkit/bot family — a platform-agnostic bot engine, a cross-platform JSX UI runtime, and a Slack platform adapter (#5274) — debuts alongside the AG-UI A2UIToolParams single-arg API on @ag-ui 0.0.56 (#5339). This cut also scopes the A2UI catalog context per-agent instead of broadcasting it into every run (#5369), makes a single unhealthy MCP server non-fatal to a run, threads app-user IDs through Intelligence thread reads and deletes (#5389), and fixes the Intelligence indicator icon that rendered blank outside Chrome (#5316).
Install
npm install @copilotkit/[email protected] @copilotkit/[email protected] @copilotkit/[email protected]
New packages
@copilotkit/bot,@copilotkit/bot-ui,@copilotkit/bot-slack(0.0.1) — A new family for building AG-UI agents into chat platforms, landing the production rework of the earlier Slack PoC (#4883).bot— a platform-agnostic engine:createBotwithonMention/onMessage/onInterrupt/onCommandhandler registration, the agent run/tool/interrupt loop, content-stable JSX action binding with cold-path rehydration from a pluggableActionStore, thePlatformAdapterboundary, capability-gated thread methods, a sharedBotToolContext,defineBotTool/defineBotCommand, and typed interaction/interrupt handlers (ships fake-adapter/fake-agent test utilities).bot-ui— a JSX runtime, intermediate representation, and a cross-platform component vocabulary.bot-slack— a Slack adapter: JSX → Block Kit rendering with per-element budgets and graceful degradation, Socket Mode ingress, opaque-id interactions (ack within 3 s, run async),chat.updatestreaming with chunking, accent attachments, and sender-profile resolution. Bolt initialization is deferred tostart().- A 100% JSX Slack on-call triage bot example (over Linear + Notion MCP) ships under
examples/slack— issue/page cards, tables, Chart.js charts, Mermaid diagrams, aconfirm_writeHITL gate, and/agent+/triageslash commands. (#5274)
Features
- A2UI adopts the single-arg
A2UIToolParamsAPI (OSS-248) —getA2UITools/get_a2ui_toolsin the LangGraph middlewares now take oneA2UIToolParamsobject (model inside), withcomposition_guidefolded into theguidelinesbag. Counterpart to ag-ui#1894, which re-enables A2UI generation and design guidelines via the shared params bag. (#5339, #5314)
Fixes
@copilotkit/core/runtime/react-core/vue: scope A2UI context per agent — the A2UI catalog context was being injected into every agent's runs. Context entries are now scoped per-agent, the runtime info response forwards per-agent A2UI scoping, and the a2ui agent list is preserved through the core context path — so only the runtime's designated a2ui agents receive the catalog. (#5369, #5383)@copilotkit/runtime: MCP server failures are non-fatal — a single unavailable MCP server (down, 5xx, timeout, bad auth) no longer fails the whole run. It's skipped with an error log and the run continues with the healthy servers and the agent's own tools. (#5274)@copilotkit/runtime: pass app-user IDs to Intelligence thread reads — the Intelligence REST API now requires explicit app-user ownership for direct thread reads, message-history lookups, and destructive thread mutations. Runtime now threads the resolveduserId(andagentIdon deletes) through those calls as route params; create/list/connect/lock already sent it. Wire-contract assertions added to the runtime tests. (#5389)@copilotkit/react-core: Intelligence indicator icon renders cross-browser — the indicator's spinner→checkmark icon was blank in Safari and Firefox because its geometry lived in the Blink-only CSSd:property. Geometry moved to the SVGdattribute, replaced the Chrome-only path-morph with two overlaid static shapes (a fading spinning arc + a self-drawing checkmark), and rotated the arc viatransform-box: fill-box; transform-origin: centerso it renders instantly and on-center in every engine. (#5316)@copilotkit/core: adapt to@ag-ui/client0.0.56'srunHttpRequest—0.0.56changedrunHttpRequestfrom(url, requestInit)to a fetch-thunk signature (() => Promise<Response>). The single-route and connect transport paths inProxiedCopilotRuntimeAgentnow wrap the request as() => this.fetch(url, init), restoring the envelope transports;@ag-ui/*added tominimum-release-age-excludeso the fresh publish installs in CI. (#5344)@copilotkit/shared/a2ui-renderer: repaircheck-typesrot — define license context types locally (drop the deadLicenseModeredefinition), remove dead 0.8-era a2ui-renderer viewer files, and resolve Angular workspace paths todistfirst in typecheck. (#5356)@copilotkit/web-inspector: Node 25 compatibility — shimlocalStoragein the vitest setup so the suite runs on Node 25. (#5274)@copilotkitnext/angular: support Angular 19–21 install — widen the@angular/*peer range to^19 || ^20 || ^21(a clean install on Angular 20/21 no longer needs--legacy-peer-deps) and correct the README to the real package name@copilotkitnext/angular. Rides the separate@copilotkitnext/angularversion line (not part of the 1.60.0 republish). (#5342)
Dependencies
@ag-ui/*bumped to0.0.56—@ag-ui/core,@ag-ui/client,@ag-ui/encoder0.0.53 → 0.0.56across all packages;@ag-ui/langgraphat0.0.41,@ag-ui/a2ui-middlewareat0.0.8. (#5339, #5344)
Packages republished at 1.60.0
@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/vue, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, and @copilotkit/agentcore-runner.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About CopilotKit
The Frontend Stack for Agents & Generative UI. React + Angular. Makers of the AG-UI Protocol
Related context
Related tools
Earlier breaking changes
- vchannels/v0.2.0 Renames `createBot` to `createChannel` and related types/helpers.
Beta — feedback welcome: [email protected]