Skip to content

harness-sdk

vtypescript/v1.11.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

βœ“ No known CVEs patched
Read the diff β†’ Tool health β†’ What is this tool? β†’
This release patches 1 known CVE

Topics

agent-framework agentic agentic-ai agents ai ai-agents
+14 more
anthropic autonomous-agents bedrock generative-ai harness llm llm-agent mcp multi-agent-systems openai python sdk strands-agents typescript

Affected surfaces

rce_ssrf

Summary

AI summary

Broad release touches πŸ› Fixes, πŸ‘· CI, πŸš€ Features, and πŸ“š Documentation.

Full changelog

typescript/v1.11.0

Auto-drafted from commits in typescript/v1.10.0..typescript/v1.11.0, grouped by conventional-commit type. Edit on the release page after publish if you want a polished writeup; the canonical release notes live on the website.

πŸš€ Features

  • feat(site): improve AI-crawler discoverability and page load performance (#3344) (1b671d6a)
  • feat(vended-tools): add sleep tool (#3393) (d9f93147)
  • feat(vended-tools): add stop tool (#3397) (767b8019)
  • feat(vended-tools): add http_request to strands-py (#3395) (18484f2e)
  • feat(bidi): propose bidi webrtc design (#3386) (b7529d20)
  • feat(py): configurable retry exceptions (#1597) (#3340) (50d388ec)
  • feat(ts): add ToolExecutor class hierarchy (#3268) (a3f54c87)
  • feat(middleware): add ExecuteToolStage with middleware-initiated interrupts (#3233) (50d76c33)
  • feat: Add official discord link (#35) (10105293)
  • feat(mcp): update fetch_doc tool with smart sectioning (#32) (0b7ea7cd)
  • feat(mcp): Return all urls on empty fetch input (#25) (56633f52)
  • feat: Use llm.txt for doc reference. rewrite this pr to include searc… (#21) (ba5a49e7)
  • feat: Deploy to pypi on github release (#14) (afe4b842)

πŸ› Fixes

  • fix(python): surface Responses stream failures (#3427) (e03f8644)
  • fix(site): complete sitemap lastmod coverage and repair blog structured data (#3345) (ef3a3495)
  • fix(multiagent): preserve shared context and cumulative accounting across serialize/deserialize (#3396) (ba37a272)
  • fix(models/llamacpp): send llama.cpp sampler params at the top level, not under extra_body (#3423) (9c077c43)
  • fix: verify aws region (#3412) (81bccd84)
  • fix: reject keys for s3 storage if not configured (#3411) (33f5f741)
  • fix(graph): keep fan-in node out of resume while a parallel sibling is in-flight (#3390) (b0ff5ef3)
  • fix(openai): replay assistant text history as valid string-content input in Responses adapters (#3399) (6d1eda96)
  • fix(openai): surface Responses stream failures (#3290) (3c234b2f)
  • fix(site): make sidebar badge spacing consistent across entry types (#3357) (40a48bbd)
  • fix(vercel): detect tool use from streamed content when finish_reason is non-tool (#3206) (d2fc5080)
  • fix(ci): make the release pip-audit step actually run (#3335) (54124de3)
  • fix: replace deprecated datetime.utcnow() with timezone-aware datetime.now(timezone.utc) (#3315) (7f6b060f)
  • fix: restore line break in hero headline (#3318) (d43a2bf1)
  • fix(ci): SHA-pin third-party GitHub Actions (#39) (bf2ec1f7)
  • fix: add url validation to mitigate SSRF issue (#29) (53310772)
  • fix: Fix linting error (#24) (d1bb1c88)
  • fix(readme): use logo that changes color automatically depending on user's color preference scheme (#10) (2449a23e)
  • fix: typo with empty string in model_providers.md (#3) (f122097a)
  • fix: add all model providers markdown and fix typos (#1) (b3a5bd68)

♻️ Refactoring

  • refactor(memory): refactor TestMemoryStore to use the unified storage interface (#3260) (41ccf5e1)
  • refactor(ts): extract shared registerNodeDefaults() to prevent src/test drift (#3303) (961b1b68)

πŸ“š Documentation

  • docs(memory): add TestMemoryStore documentation (#3199) (6f6fb65d)
  • docs(site): add missing meta descriptions and fix duplicate page titles (#3342) (87be9907)
  • docs: add strands-dakera to the Memory Stores community category (#3082) (7115faf8)
  • docs(memory): add community page for AgentCore Memory Store (#3316) (ad5685f7)
  • docs(site): replace duplicated examples guide with reference pointer (#3288) (41f9f59b)
  • docs(changelog): sync strands-agents/harness-sdk typescript/v1.10.0 (#3320) (f0c6d6ec)
  • docs(changelog): sync strands-agents/harness-sdk python/v1.48.0 (#3319) (1665c631)
  • docs(readme): clarify uv requirement and add Inspector documentation (#11) (d401990d)
  • docs(readme): add logo, title, badges, links to other repos, standardize headings (#9) (ace37213)

πŸ“¦ Build

  • build(pyproject): update development status classifier (#17) (565ccfa0)

πŸ‘· CI

  • ci(docs): bump @astrojs/starlight from 0.41.3 to 0.41.4 in /site (#3420) (0fe3ed07)
  • ci: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#3406) (7b0717c4)
  • ci: bump astral-sh/setup-uv from 8.3.0 to 9.0.0 (#3407) (ba297cfb)
  • ci(docs): bump satteri from 0.9.4 to 0.9.5 in /site (#3141) (da6dd24d)
  • ci: bump actions/setup-python from 6 to 7 (#3352) (c6e8b963)
  • ci(docs): bump astro from 7.1.0 to 7.1.3 in /site (#3366) (570e1c82)
  • ci(typescript): bump body-parser from 2.2.2 to 2.3.0 (#3387) (8685e1a9)
  • ci(docs): bump prettier from 3.9.5 to 3.9.6 in /site (#3367) (df352d39)
  • ci(docs): bump p-limit from 7.3.0 to 7.3.1 in /site (#3368) (1831003c)
  • ci(docs): bump node-html-parser from 8.0.4 to 9.0.0 in /site (#3106) (3966e703)
  • ci(docs): bump @octokit/rest from 21.1.1 to 22.0.1 in /site (#3140) (f2081f11)
  • ci(typescript): bump brace-expansion from 5.0.6 to 5.0.7 (#3370) (1b5fddbb)
  • ci(docs): bump astro from 7.0.6 to 7.1.0 in /site (#3312) (f777cf36)
  • ci(docs): bump sanitize-html from 2.17.5 to 2.17.6 in /site (#3213) (ec8c442e)

πŸ”§ Chores

  • chore(mcp): integrate strands-mcp into monorepo CI and conventions (612fd3ea)
  • chore(site): compress oversized blog and docs media (#3292) (2323f80a)
  • chore: prepare directory layout for monorepo convergence (#38) (4940700c)
  • chore(docs): Add one-click install and more IDE install examples (#27) (561daeb7)
  • chore: add Python 3.14 to pyproject.toml classifiers (#28) (83aa9190)
  • chore: Remove Preview (#15) (431afb1b)

πŸ”– Other

  • Update tool description (#22) (4ec143cd)
  • Use strands logo that looks good in dark & light mode (#18) (f88c4908)
  • v0.1.2 (#13) (6ff05a4f)
  • Update version to v0.1.1 (#6) (6e95506d)
  • Fix wording in tools content (#4) (3fa07e5e)
  • This commit intertwines the twin strands of agents and tools, creating an SDK where autonomous intelligence can evolve. (976a7d1d)

Security Fixes

  • Add url validation to mitigate SSRF issue

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track harness-sdk

Get notified when new releases ship.

Sign up free

About harness-sdk

A model-driven approach to building AI agents in just a few lines of code.

All releases β†’

Related context

Earlier breaking changes

Beta — feedback welcome: [email protected]