deepagents

vdeepagents==0.6.3 scope: deepagents Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 14d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai deepagents langchain langgraph python typescript

ReleasePort's take

Light signal

editorial:auto 14d

deepagents 0.6.3 fixes three core issues: UUID assignment for ID-less messages, HTML comment sanitization in memory content, and ripgrep glob anchoring to search root.

Why it matters: Patch if using message memory or custom skills in production. Fixes resolve message tracking gaps and prevent HTML comment interference in system prompts.

Summary

AI summary

Fixed assignment of UUIDs to ID‑less messages in _messages_delta_reducer.

Changes in this release

Type	Severity	Summary	CVE
Feature	Medium	Clarify skill source labels in system prompt Clarify skill source labels in system prompt Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low	—
Bugfix
Bugfix	Medium	Anchor ripgrep glob to search root Anchor ripgrep glob to search root Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high	—
Bugfix	Medium	Assign UUIDs to ID-less messages in _messages_delta_reducer Assign UUIDs to ID-less messages in _messages_delta_reducer Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high	—
Bugfix	Medium	Strip HTML comments from memory content before system prompt injection Strip HTML comments from memory content before system prompt injection Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low	—

Full changelog

Bug Fixes

Anchor ripgrep glob to search root (#3454) (e50fa3f)
Assign UUIDs to ID-less messages in _messages_delta_reducer (#3513) (6d959ad)
Clarify skill source labels in system prompt (#3464) (fc6a24f)
Strip HTML comments from memory content before system prompt injection (#3462) (bfbb8bc)

Internal maintainers: @nick-hollon-lc, @sydney-runkle, @mdrxy

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track deepagents

Get notified when new releases ship.

About deepagents

Agent harness built with LangChain and LangGraph. Equipped with a planning tool, a filesystem backend, and the ability to spawn subagents - well-equipped to handle complex agentic tasks.

All releases →

Related context

Related tools

Earlier breaking changes

vdeepagents-cli==0.2.0 `deepagents deploy` now targets Managed Deep Agents API; removes `deepagents dev`, `deepagents.toml`, and `--config`/`--dry-run` flags.