harness-sdk

v1.18.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 8mo AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agent-framework agentic agentic-ai agents ai ai-agents

+14 more

anthropic autonomous-agents bedrock generative-ai harness llm llm-agent mcp multi-agent-systems openai python sdk strands-agents typescript

Summary

AI summary

Security hardening in tool_loader prevents tool name and sys module collisions, fixes swarm session management tests, and protects MCP connections on non‑fatal client timeouts.

Full changelog

What's Changed

multi agent input by @pgrayy in https://github.com/strands-agents/sdk-python/pull/1196
interrupt - activate - set context separately by @pgrayy in https://github.com/strands-agents/sdk-python/pull/1194
In PrintingCallbackHandler, make the verbose description and counting… by @marcbrooker in https://github.com/strands-agents/sdk-python/pull/1211
fix: fix swarm session management integ test. by @JackYPCOnline in https://github.com/strands-agents/sdk-python/pull/1155
move tool caller definition out of agent module by @pgrayy in https://github.com/strands-agents/sdk-python/pull/1215
interrupt - interruptible multi agent hook interface by @pgrayy in https://github.com/strands-agents/sdk-python/pull/1207
security(tool_loader): prevent tool name and sys modules collisions i… by @dbschmigelski in https://github.com/strands-agents/sdk-python/pull/1214
fix(mcp): protect connection on non-fatal client side timeout error by @dbschmigelski in https://github.com/strands-agents/sdk-python/pull/1231
fix(litellm): populate cacheWriteInputTokens from cache_creation_input_token not cache_creation_tokens by @dbschmigelski in https://github.com/strands-agents/sdk-python/pull/1233
fix: fix integ test for mcp elicitation_server by @JackYPCOnline in https://github.com/strands-agents/sdk-python/pull/1234

New Contributors

@marcbrooker made their first contribution in https://github.com/strands-agents/sdk-python/pull/1211

Full Changelog: https://github.com/strands-agents/sdk-python/compare/v1.17.0...v1.18.0

Security Fixes

tool_loader: prevent tool name and sys modules collisions (security hardening)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track harness-sdk

Get notified when new releases ship.

About harness-sdk

A model-driven approach to building AI agents in just a few lines of code.

All releases →

Related context

Related tools

Earlier breaking changes

vtypescript/v1.9.0 Rename LocalMemoryStore to TestMemoryStore (breaking change).
vpython/v1.47.0 Renames LocalMemoryStore to TestMemoryStore (breaking change).
vtypescript/v1.5.0 Change memory store return type on add in strands-py.