This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+14 more
Affected surfaces
Summary
AI summaryBroad release touches π Fixes, π· CI, π Features, and π Documentation.
Full changelog
python/v1.50.0
Auto-drafted from commits in python/v1.48.0..python/v1.50.0, grouped by conventional-commit type. Edit on the release page after publish if you want a polished writeup; the canonical release notes live on the website.
π Features
- feat(site): improve AI-crawler discoverability and page load performance (#3344) (1b671d6a)
- feat(vended-tools): add sleep tool (#3393) (d9f93147)
- feat(vended-tools): add stop tool (#3397) (767b8019)
- feat(vended-tools): add http_request to strands-py (#3395) (18484f2e)
- feat(bidi): propose bidi webrtc design (#3386) (b7529d20)
- feat(py): configurable retry exceptions (#1597) (#3340) (50d388ec)
- feat(ts): add ToolExecutor class hierarchy (#3268) (a3f54c87)
- feat(middleware): add ExecuteToolStage with middleware-initiated interrupts (#3233) (50d76c33)
- feat: Add official discord link (#35) (10105293)
- feat(mcp): update fetch_doc tool with smart sectioning (#32) (0b7ea7cd)
- feat(mcp): Return all urls on empty fetch input (#25) (56633f52)
- feat: Use llm.txt for doc reference. rewrite this pr to include searc⦠(#21) (ba5a49e7)
- feat: Deploy to pypi on github release (#14) (afe4b842)
π Fixes
- fix(python): surface Responses stream failures (#3427) (e03f8644)
- fix(site): complete sitemap lastmod coverage and repair blog structured data (#3345) (ef3a3495)
- fix(multiagent): preserve shared context and cumulative accounting across serialize/deserialize (#3396) (ba37a272)
- fix(models/llamacpp): send llama.cpp sampler params at the top level, not under extra_body (#3423) (9c077c43)
- fix: verify aws region (#3412) (81bccd84)
- fix: reject keys for s3 storage if not configured (#3411) (33f5f741)
- fix(graph): keep fan-in node out of resume while a parallel sibling is in-flight (#3390) (b0ff5ef3)
- fix(openai): replay assistant text history as valid string-content input in Responses adapters (#3399) (6d1eda96)
- fix(openai): surface Responses stream failures (#3290) (3c234b2f)
- fix(site): make sidebar badge spacing consistent across entry types (#3357) (40a48bbd)
- fix(vercel): detect tool use from streamed content when finish_reason is non-tool (#3206) (d2fc5080)
- fix(ci): make the release pip-audit step actually run (#3335) (54124de3)
- fix: replace deprecated datetime.utcnow() with timezone-aware datetime.now(timezone.utc) (#3315) (7f6b060f)
- fix: restore line break in hero headline (#3318) (d43a2bf1)
- fix(ci): SHA-pin third-party GitHub Actions (#39) (bf2ec1f7)
- fix: add url validation to mitigate SSRF issue (#29) (53310772)
- fix: Fix linting error (#24) (d1bb1c88)
- fix(readme): use logo that changes color automatically depending on user's color preference scheme (#10) (2449a23e)
- fix: typo with empty string in model_providers.md (#3) (f122097a)
- fix: add all model providers markdown and fix typos (#1) (b3a5bd68)
β»οΈ Refactoring
- refactor(memory): refactor TestMemoryStore to use the unified storage interface (#3260) (41ccf5e1)
- refactor(ts): extract shared registerNodeDefaults() to prevent src/test drift (#3303) (961b1b68)
π Documentation
- docs(memory): add TestMemoryStore documentation (#3199) (6f6fb65d)
- docs(site): add missing meta descriptions and fix duplicate page titles (#3342) (87be9907)
- docs: add strands-dakera to the Memory Stores community category (#3082) (7115faf8)
- docs(memory): add community page for AgentCore Memory Store (#3316) (ad5685f7)
- docs(site): replace duplicated examples guide with reference pointer (#3288) (41f9f59b)
- docs(changelog): sync strands-agents/harness-sdk typescript/v1.10.0 (#3320) (f0c6d6ec)
- docs(changelog): sync strands-agents/harness-sdk python/v1.48.0 (#3319) (1665c631)
- docs(readme): clarify uv requirement and add Inspector documentation (#11) (d401990d)
- docs(readme): add logo, title, badges, links to other repos, standardize headings (#9) (ace37213)
π¦ Build
- build(pyproject): update development status classifier (#17) (565ccfa0)
π· CI
- ci(docs): bump @astrojs/starlight from 0.41.3 to 0.41.4 in /site (#3420) (0fe3ed07)
- ci: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#3406) (7b0717c4)
- ci: bump astral-sh/setup-uv from 8.3.0 to 9.0.0 (#3407) (ba297cfb)
- ci(docs): bump satteri from 0.9.4 to 0.9.5 in /site (#3141) (da6dd24d)
- ci: bump actions/setup-python from 6 to 7 (#3352) (c6e8b963)
- ci(docs): bump astro from 7.1.0 to 7.1.3 in /site (#3366) (570e1c82)
- ci(typescript): bump body-parser from 2.2.2 to 2.3.0 (#3387) (8685e1a9)
- ci(docs): bump prettier from 3.9.5 to 3.9.6 in /site (#3367) (df352d39)
- ci(docs): bump p-limit from 7.3.0 to 7.3.1 in /site (#3368) (1831003c)
- ci(docs): bump node-html-parser from 8.0.4 to 9.0.0 in /site (#3106) (3966e703)
- ci(docs): bump @octokit/rest from 21.1.1 to 22.0.1 in /site (#3140) (f2081f11)
- ci(typescript): bump brace-expansion from 5.0.6 to 5.0.7 (#3370) (1b5fddbb)
- ci(docs): bump astro from 7.0.6 to 7.1.0 in /site (#3312) (f777cf36)
- ci(docs): bump sanitize-html from 2.17.5 to 2.17.6 in /site (#3213) (ec8c442e)
π§ Chores
- chore(mcp): integrate strands-mcp into monorepo CI and conventions (612fd3ea)
- chore(site): compress oversized blog and docs media (#3292) (2323f80a)
- chore: prepare directory layout for monorepo convergence (#38) (4940700c)
- chore(docs): Add one-click install and more IDE install examples (#27) (561daeb7)
- chore: add Python 3.14 to pyproject.toml classifiers (#28) (83aa9190)
- chore: Remove Preview (#15) (431afb1b)
π Other
- Update tool description (#22) (4ec143cd)
- Use strands logo that looks good in dark & light mode (#18) (f88c4908)
- v0.1.2 (#13) (6ff05a4f)
- Update version to v0.1.1 (#6) (6e95506d)
- Fix wording in tools content (#4) (3fa07e5e)
- This commit intertwines the twin strands of agents and tools, creating an SDK where autonomous intelligence can evolve. (976a7d1d)
Security Fixes
- fix: add url validation to mitigate SSRF issue (#29)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About harness-sdk
A model-driven approach to building AI agents in just a few lines of code.
Related context
Related tools
Earlier breaking changes
- vtypescript/v1.9.0 Rename LocalMemoryStore to TestMemoryStore (breaking change).
- vpython/v1.47.0 Renames LocalMemoryStore to TestMemoryStore (breaking change).
- vtypescript/v1.5.0 Change memory store return type on add in strands-py.
Beta — feedback welcome: [email protected]