This release adds 15 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
ReleasePort's take
Moderate signalAddress CodeQL static analysis findings in JavaScript/TypeScript and update the memory store add API return type.
Why it matters: Security: remediate high-severity (70) CodeQL issues; Breaking change: adjust code for new memory.store.add return type (severity 80).
Summary
AI summaryBroad release touches feat, fix, ci, and site.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Address CodeQL static analysis findings in JavaScript/TypeScript. Address CodeQL static analysis findings in JavaScript/TypeScript. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Security | Medium |
Add maintain role to auto‑strands‑review allowed roles. Add maintain role to auto‑strands‑review allowed roles. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Breaking | High |
Change memory store return type on add in strands-py. Change memory store return type on add in strands-py. Source: llm_adapter@2026-06-12 Confidence: low |
— |
| Feature | Medium |
Add Bedrock Knowledge Base memory store. Add Bedrock Knowledge Base memory store. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Feature | Medium |
Add Docker/SSH Sandbox implementations for Python. Add Docker/SSH Sandbox implementations for Python. Source: llm_adapter@2026-06-12 Confidence: low |
— |
| Feature | Medium |
Add middleware system for wrapping agent stages. Add middleware system for wrapping agent stages. Source: llm_adapter@2026-06-12 Confidence: low |
— |
| Feature | Medium |
Add AgentCore tool search community plugin page. Add AgentCore tool search community plugin page. Source: llm_adapter@2026-06-12 Confidence: low |
— |
| Feature | Medium |
Add per‑invocation limits feature and document it. Add per‑invocation limits feature and document it. Source: llm_adapter@2026-06-12 Confidence: low |
— |
| Feature | Medium |
Add model_state as a snapshot field. Add model_state as a snapshot field. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Add optional hook order to strands-py. Add optional hook order to strands-py. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Add memory manager to memory module. Add memory manager to memory module. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Add human‑in‑the‑loop documentation. Add human‑in‑the‑loop documentation. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Wire checkpointing into agent event loop. Wire checkpointing into agent event loop. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Make get/set app state synchronous in strands-py-wasm. Make get/set app state synchronous in strands-py-wasm. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Wire vended tools through the WASM guest. Wire vended tools through the WASM guest. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Add test‑infra/ CDK stack for long‑running integration test resources. Add test‑infra/ CDK stack for long‑running integration test resources. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Introduce agent factory for isolating agent context from different callers (a2a). Introduce agent factory for isolating agent context from different callers (a2a). Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Generate smart preview links for changed documentation pages on the site. Generate smart preview links for changed documentation pages on the site. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Add message pinning to conversation managers in context module. Add message pinning to conversation managers in context module. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Medium |
Surface MaxTokensError when max_tokens truncates tool input JSON. Surface MaxTokensError when max_tokens truncates tool input JSON. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Include JSON blocks in token counting. Include JSON blocks in token counting. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Preserve signature‑only reasoning blocks across turns in Bedrock. Preserve signature‑only reasoning blocks across turns in Bedrock. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Update remaining sdk-python references to harness-sdk across the codebase. Update remaining sdk-python references to harness-sdk across the codebase. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Remove orphaned evaluation stub page from site. Remove orphaned evaluation stub page from site. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Update stale GitHub links in site to point to harness-sdk repository. Update stale GitHub links in site to point to harness-sdk repository. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Refactor | Low |
Simplify DockerSandbox to bring‑your‑own‑container approach. Simplify DockerSandbox to bring‑your‑own‑container approach. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Refactor | Low |
Use native model_state snapshot field in a2a. Use native model_state snapshot field in a2a. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Other | Low |
Update repository references to harness-sdk. Update repository references to harness-sdk. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Other | Low |
Add explicit permissions to workflow jobs. Add explicit permissions to workflow jobs. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Other | Low |
Add automated issue labeling workflow. Add automated issue labeling workflow. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Other | Low |
Bump actions/checkout from version 4 to 6 in CI configuration. Bump actions/checkout from version 4 to 6 in CI configuration. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Other | Low |
Add PR labeling to issue‑labeler workflow. Add PR labeling to issue‑labeler workflow. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
Full changelog
What's Changed
- feat(strands-py): add optional hook order by @lizradway in https://github.com/strands-agents/harness-sdk/pull/2559
- feat(memory): add memory manager by @opieter-aws in https://github.com/strands-agents/harness-sdk/pull/2544
- chore: change memory store return type on add by @opieter-aws in https://github.com/strands-agents/harness-sdk/pull/2613
- feat(docs): add human in the loop by @lizradway in https://github.com/strands-agents/harness-sdk/pull/2558
- feat(checkpoint): wire checkpointing into agent event loop by @JackYPCOnline in https://github.com/strands-agents/harness-sdk/pull/2190
- feat(strands-py-wasm): make get/set app state sync by @pgrayy in https://github.com/strands-agents/harness-sdk/pull/2610
- feat(strands-py-wasm): wire vended tools through the WASM guest by @pgrayy in https://github.com/strands-agents/harness-sdk/pull/2607
- docs: remove archived agent-builder references by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2616
- fix: surface MaxTokensError when max_tokens truncates tool input JSON by @JackYPCOnline in https://github.com/strands-agents/harness-sdk/pull/2620
- fix: add maintain role to auto-strands-review allowed-roles by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2633
- feat: simplify DockerSandbox to bring-your-own-container by @gautamsirdeshmukh in https://github.com/strands-agents/harness-sdk/pull/2561
- chore(docs): remove duplicate community callouts from xAI provider page by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2637
- feat: add AgentCore tool search community plugin page by @senthilkumarmohan in https://github.com/strands-agents/harness-sdk/pull/2623
- chore: update repository references to harness-sdk by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2618
- fix: include json blocks in counting tokens by @opieter-aws in https://github.com/strands-agents/harness-sdk/pull/2639
- chore(site): update GitHub dropdown to harness-sdk and add evals by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2641
- docs: remove unnecessary model IDs from examples, rely on built-in defaults by @opieter-aws in https://github.com/strands-agents/harness-sdk/pull/2645
- feat: add test-infra/ CDK stack for long-running integ test resources by @notowen333 in https://github.com/strands-agents/harness-sdk/pull/2650
- docs: document per-invocation limits feature by @notowen333 in https://github.com/strands-agents/harness-sdk/pull/2638
- docs(strands-ts): update Bedrock examples to default model id by @JackYPCOnline in https://github.com/strands-agents/harness-sdk/pull/2669
- chore: add missing policies to integ test role by @notowen333 in https://github.com/strands-agents/harness-sdk/pull/2670
- chore: fixup test-infra constructs by @notowen333 in https://github.com/strands-agents/harness-sdk/pull/2673
- fix(strands-ts): update package.json repository URLs to harness-sdk by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2675
- feat(strands-py): add Sandbox core abstraction (TS→Python port, core only 1/N) by @agent-of-mkmeral in https://github.com/strands-agents/harness-sdk/pull/2665
- feat(context): add context_manager="auto" facade on Agent by @lizradway in https://github.com/strands-agents/harness-sdk/pull/2643
- refactor(site): use local monorepo source instead of cloning SDKs by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2677
- feat: add claude-opus-4-8 to context window limits by @lizradway in https://github.com/strands-agents/harness-sdk/pull/2676
- fix(a2a): introduce agent factory for isolating agent context from different callers by @JackYPCOnline in https://github.com/strands-agents/harness-sdk/pull/2628
- feat: add model_state as a snapshot field by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2680
- fix(site): update community contribution link to harness-sdk repo by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2695
- refactor(a2a): use native model_state snapshot field by @JackYPCOnline in https://github.com/strands-agents/harness-sdk/pull/2694
- fix: remove orphaned evaluation stub page by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2678
- feat(site): generate smart preview links for changed doc pages by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2692
- fix(site): update stale GitHub links from old repos to harness-sdk by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2698
- ci: add explicit permissions to workflow jobs by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2388
- fix: address CodeQL static analysis findings in JS/TS by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2390
- docs: add steering intervention handler documentation for TypeScript by @lizradway in https://github.com/strands-agents/harness-sdk/pull/2624
- ci: add automated issue labeling workflow by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2359
- feat(context): add message pinning to conversation managers by @lizradway in https://github.com/strands-agents/harness-sdk/pull/2644
- fix: update remaining sdk-python references to harness-sdk by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2701
- feat: add Bedrock Knowledge Base memory store by @notowen333 in https://github.com/strands-agents/harness-sdk/pull/2630
- ci: bump actions/checkout from 4 to 6 by @dependabot[bot] in https://github.com/strands-agents/harness-sdk/pull/2100
- ci: add PR labeling to issue-labeler workflow by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2702
- feat(python): add Docker/SSH Sandbox implementations by @gautamsirdeshmukh in https://github.com/strands-agents/harness-sdk/pull/2691
- fix(bedrock): preserve signature-only reasoning blocks across turns by @pgrayy in https://github.com/strands-agents/harness-sdk/pull/2704
- feat: add pr-create and pr-writer agent skills by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2646
- feat: add pr-feedback agent skill for triaging PR review comments by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2712
- feat: add memory extraction by @opieter-aws in https://github.com/strands-agents/harness-sdk/pull/2671
- docs: add README to .agents/skills/ explaining each skill's purpose by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2714
- blog: inside Agentic Football Cup — 10 Strands Agents, 1 Second to Decide by @ianholtz in https://github.com/strands-agents/harness-sdk/pull/2651
- feat: add middleware system for wrapping agent stages by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2681
- docs(a2a): document per-context conversation isolation by @JackYPCOnline in https://github.com/strands-agents/harness-sdk/pull/2699
- fix(a2a): isolate conversation state per context in TypeScript by @JackYPCOnline in https://github.com/strands-agents/harness-sdk/pull/2696
- feat: migrate TS integration test role to shared test-infra CDK stack by @notowen333 in https://github.com/strands-agents/harness-sdk/pull/2715
- ci: allow
blogtype in PR title validation by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2718 - fix(strands-py): default to us-east-1 for integration tests by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2720
- ci: enforce API review label requirement before merge by @zastrowm in https://github.com/strands-agents/harness-sdk/pull/2716
- feat: allow same-account IAM roles to assume the integ test role by @notowen333 in https://github.com/strands-agents/harness-sdk/pull/2723
- fix: improve devx for instantiating multiple bedrock KBs by @opieter-aws in https://github.com/strands-agents/harness-sdk/pull/2722
- fix(dependabot): label npm updates typescript instead of javascript by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2726
- fix(template): remove stale consuming-repos reference from PR template by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2727
- feat: integrate Sandbox with Agent by @gautamsirdeshmukh in https://github.com/strands-agents/harness-sdk/pull/2563
- feat: update vended tools/plugins for sandbox compatibility by @gautamsirdeshmukh in https://github.com/strands-agents/harness-sdk/pull/2649
- feat: pass sequenceNumber to memory store addMessages method by @opieter-aws in https://github.com/strands-agents/harness-sdk/pull/2721
- feat: add extraction defaults and support for bedrock kbs by @opieter-aws in https://github.com/strands-agents/harness-sdk/pull/2719
- feat: implement intervention primitive in python with cancellation support by @mehtarac in https://github.com/strands-agents/harness-sdk/pull/2693
- fix(strands-py): remove flaky test_graph_parallel_execution test by @lizradway in https://github.com/strands-agents/harness-sdk/pull/2743
- fix(issue-labeler): stop over-applying area-community and chore by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2725
- docs: add AI contribution guidance to CONTRIBUTING and PR template by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2728
- docs(agents): add community and character guidance to AGENTS.md by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2747
- docs(agents): add PR quality bar to AGENTS.md by @yonib05 in https://github.com/strands-agents/harness-sdk/pull/2729
- docs: add context management page for context_manager=auto by @lizradway in https://github.com/strands-agents/harness-sdk/pull/2741
New Contributors
- @senthilkumarmohan made their first contribution in https://github.com/strands-agents/harness-sdk/pull/2623
- @ianholtz made their first contribution in https://github.com/strands-agents/harness-sdk/pull/2651
Full Changelog: https://github.com/strands-agents/harness-sdk/compare/python-wasm/v0.0.1...typescript/v1.5.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About harness-sdk
A model-driven approach to building AI agents in just a few lines of code.
Related context
Related tools
Earlier breaking changes
- vtypescript/v1.9.0 Rename LocalMemoryStore to TestMemoryStore (breaking change).
- vpython/v1.47.0 Renames LocalMemoryStore to TestMemoryStore (breaking change).
Beta — feedback welcome: [email protected]