This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryBroad release touches Bug Fixes, code, YOLO, and deps.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Plugins are now generally available. Plugins are now generally available. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Added search to the plugin list and summarize changes after reloads. Added search to the plugin list and summarize changes after reloads. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Added Kimi K3 to the OpenRouter model selector. Added Kimi K3 to the OpenRouter model selector. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Added hidden `connect` and `reconnect` keywords for `/restart`. Added hidden `connect` and `reconnect` keywords for `/restart`. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Debug Console thread IDs can be clicked to copy with a LangSmith link. Debug Console thread IDs can be clicked to copy with a LangSmith link. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Added auto-approve (YOLO) mode to trace metadata. Added auto-approve (YOLO) mode to trace metadata. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Improved plugin marketplace loading and onboarding, including asynchronous additions. Improved plugin marketplace loading and onboarding, including asynchronous additions. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Avoided blocking MCP OAuth token refresh. Avoided blocking MCP OAuth token refresh. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Restored keyboard focus for marketplace details. Restored keyboard focus for marketplace details. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Dismissed the startup tip when submitting an initial prompt with `-m`. Dismissed the startup tip when submitting an initial prompt with `-m`. Source: llm_adapter@2026-07-17 Confidence: high |
— |
Full changelog
Features
- Plugins are now generally available. (#4797)
- Added search to the plugin list and now summarize plugin changes after reloads. (#4765, #4767)
- Added Kimi K3 to the OpenRouter model selector. (#4803)
- Added hidden
connectandreconnectkeywords for/restart. (#4807) - Debug Console thread IDs can now be clicked to copy, with an added LangSmith link. (#4760)
- Added auto-approve (YOLO) mode to trace metadata. (#4764)
Bug Fixes
- Improved plugin marketplace loading and onboarding, including asynchronous marketplace additions and polish for empty marketplace states. (#4766, #4759)
- Clarified plugin component discovery and reload status. (#4774)
- Avoided blocking MCP OAuth token refresh. (#4770)
- Restored keyboard focus for marketplace details. (#4763)
- Dismissed the startup tip when submitting an initial prompt with
-m. (#4779)
Internal maintainers: @johannes117, @mdrxy
Released by: @mdrxy
Git log since deepagents-code==0.1.41This commit history includes changes to this package. Commits are listed newest first.
18679a1release(deepagents-code): 0.1.42 (#4793)3da6e47feat(code): make plugins generally available (#4797)3b2ffcefix(code): avoid blocking MCP OAuth token refresh (#4770)0d1bb6afix(code): add marketplaces asynchronously (#4766)9cad2f0feat(code): summarize plugin changes on reload (#4767)99250eefeat(code): addreconnect/connecthidden keywords for/restart(#4807)a6c20b1feat(code): add plugin list search (#4765)fc94bb7feat(code): add Kimi K3 to model selector under OpenRouter (#4803)29d6046chore(deps): requirelangchain-quickjs0.3.3 (#4802)b17d1b3chore(deps): bump mcp from 1.26.0 to 1.28.1 in /libs/evals (#4800)f7ed5d8release(langchain-quickjs): 0.3.3 (#4372)2d35507feat(code): Debug Console thread ID click-to-copy with LangSmith link (#4760)d88601efeat(code): trace auto-approve (YOLO) mode in trace metadata (#4764)78f9f5ftest(code): isolate ambient env and global dotenv in unit tests (#4778)8acd414fix(code): dismiss startup tip on-minitial submission (#4779)e821d3dfix(code): restore marketplace details keyboard focus [closes DCD-50] (#4763)7d707b8fix(code): clarify plugin component discovery and reload status (#4774)ab2e101fix(code): improve empty marketplace onboarding and list polish (#4759)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About deepagents
Agent harness built with LangChain and LangGraph. Equipped with a planning tool, a filesystem backend, and the ability to spawn subagents - well-equipped to handle complex agentic tasks.
Related context
Related tools
Earlier breaking changes
- vlangchain-quickjs==0.2.0 Removes `skills_backend` capability.
- vdeepagents-cli==0.2.0 `deepagents deploy` now targets Managed Deep Agents API; removes `deepagents dev`, `deepagents.toml`, and `--config`/`--dry-run` flags.
Beta — feedback welcome: [email protected]