Skip to content

Release history

crewAI releases

Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.

All releases

21 shown

Review required
1.14.6 Mixed
Auth RCE / SSRF

StdioTransport enhancement + bug fixes + ACP Beta docs

No immediate action
1.14.5 Security relevant

CrewAgentExecutor deprecation + tool rename

patches CVE-2023-4863 patches CVE-2026-42208
Open
1.14.4 New feature
Notable features
  • Support for custom persistence key in @persist decorator
  • Responses API integration with Azure OpenAI provider
  • Vertex AI workload identity federation setup guide
Full changelog

What's Changed

Features

  • Add support for custom persistence key in @persist
  • Add Responses API support for Azure OpenAI provider
  • Forward credential_scopes to Azure AI Inference client
  • Add Vertex AI workload identity setup guide
  • Add Tavily Research and get Research
  • Add You.com MCP tools for search, research, and content extraction

Bug Fixes

  • Fix fall through when JSON regex match isn't valid JSON
  • Fix to preserve tool_calls when response also contains text
  • Fix to forward base_url and api_key to instructor.from_provider
  • Fix to warn and return empty when native MCP server returns no tools
  • Fix to use validated messages variable in non-streaming handlers
  • Fix to guard crew chat description helpers against LLM failures
  • Fix to reset messages and iterations between invocations
  • Fix to forward trained-agents file through replay and test
  • Fix to honor custom trained-agents file at inference
  • Fix to bind task-only agents to crew for multimodal input_files
  • Fix to serialize guardrail callables as null for JSON checkpointing
  • Fix renaming of force_final_answer to avoid self-referential router
  • Fix bump of litellm for SSTI fix; ignore unfixable pip CVE

Documentation

  • Update changelog and version for v1.14.4a1
  • Add E2B Sandbox Tools page
  • Add Daytona sandbox tools documentation

Contributors

@EdwardIrby, @dependabot[bot], @factory-droid-oss, @factory-droid[bot], @greysonlalonde, @kunalk16, @lorenzejay, @lucasgomide, @manisrinivasan2k1, @mattatcha, @vinibrsl

1.14.3 Mixed
Security fixes
  • Upgraded lxml to >=6.1.0 for security patch
  • Bumped python-dotenv to >=1.2.2 for security patch
Notable features
  • Checkpoint and fork support for standalone agents
  • Lifecycle events for checkpoint operations
  • Bedrock V4 support with e2b and Daytona sandbox tools
Full changelog

What's Changed

Features

  • Add lifecycle events for checkpoint operations
  • Add support for e2b
  • Fall back to DefaultAzureCredential when no API key is provided in Azure integration
  • Add Bedrock V4 support
  • Add Daytona sandbox tools for enhanced functionality
  • Add checkpoint and fork support to standalone agents

Bug Fixes

  • Fix execution_id to be separate from state.id
  • Resolve replay of recorded method events on checkpoint resume
  • Fix serialization of initial_state class references as JSON schema
  • Preserve metadata-only agent skills
  • Propagate implicit @CrewBase names to crew events
  • Merge execution metadata on duplicate batch initialization
  • Fix serialization of Task class-reference fields for checkpointing
  • Handle BaseModel result in guardrail retry loop
  • Preserve thought_signature in Gemini streaming tool calls
  • Emit task_started on fork resume and redesign checkpoint TUI
  • Use future dates in checkpoint prune tests to prevent time-dependent failures
  • Fix dry-run order and handle checked-out stale branch in devtools release
  • Upgrade lxml to >=6.1.0 for security patch
  • Bump python-dotenv to >=1.2.2 for security patch

Documentation

  • Update changelog and version for v1.14.3
  • Add 'Build with AI' page and update navigation for all languages
  • Remove pricing FAQ from build-with-ai page across all locales

Performance

  • Optimize MCP SDK and event types to reduce cold start by ~29%

Refactoring

  • Refactor checkpoint helpers to eliminate duplication and tighten state type hints

Contributors

@MatthiasHowellYopp, @akaKuruma, @alex-clawd, @github-actions[bot], @github-advanced-security[bot], @greysonlalonde, @iris-clawd, @lorenzejay, @mattatcha, @renatonitta

1.14.2 Security relevant
Security fixes
  • Patched vulnerabilities in authlib, langchain-text-splitters, pypdf, requests, cryptography, and pytest
Notable features
  • Checkpoint resume, diff, and prune commands
  • from_checkpoint parameter for Agent.kickoff
  • Checkpoint forking with lineage tracking
Full changelog

What's Changed

Features

  • Add checkpoint resume, diff, and prune commands with improved discoverability.
  • Add from_checkpoint parameter to Agent.kickoff and related methods.
  • Add template management commands for project templates.
  • Add resume hints to devtools release on failure.
  • Add deploy validation CLI and enhance LLM initialization ergonomics.
  • Add checkpoint forking with lineage tracking.
  • Enrich LLM token tracking with reasoning tokens and cache creation tokens.

Bug Fixes

  • Fix prompt on stale branch conflicts in devtools release.
  • Patch vulnerabilities in authlib, langchain-text-splitters, and pypdf.
  • Scope streaming handlers to prevent cross-run chunk contamination.
  • Dispatch Flow checkpoints through Flow APIs in TUI.
  • Use recursive glob for JSON checkpoint discovery.
  • Handle cyclic JSON schemas in MCP tool resolution.
  • Preserve Bedrock tool call arguments by removing truthy default.
  • Emit flow_finished event after HITL resume.
  • Fix various vulnerabilities by updating dependencies, including requests, cryptography, and pytest.
  • Fix to stop forwarding strict mode to Bedrock Converse API.

Documentation

  • Document missing parameters and add Checkpointing section.
  • Update changelog and version for v1.14.2 and previous release candidates.
  • Add enterprise A2A feature documentation and update OSS A2A docs.

Contributors

@Yanhu007, @alex-clawd, @github-actions[bot], @greysonlalonde, @iris-clawd, @lorenzejay, @lucasgomide

1.14.1 Security relevant
Security fixes
  • CVE-2026-1839 in transformers
Notable features
  • async checkpoint TUI browser
  • aclose()/close() context manager for streaming
1.14.0 Mixed
Breaking changes
  • Removed CodeInterpreterTool
  • Deprecated code execution parameters
Security fixes
  • SSRF protections
  • Path traversal protections in RAG tools
  • CVE-2026-35030 in litellm
Notable features
  • SqliteProvider for checkpoint storage
  • CheckpointConfig automatic checkpointing
  • Runtime state checkpointing and event system
1.13.0 New feature
Notable features
  • RuntimeState RootModel for unified serialization
  • A2UI extension with v0.8/v0.9 support
  • Token usage emission in LLMCallCompletedEvent
1.12.2 Bug fix

Added enterprise release phase to devtools release pipeline. Fixed preservation of method return values as flow output for human feedback integration with emit.

1.12.1 New feature
Notable features
  • Native OpenAI-compatible providers (6 new)
  • Qdrant Edge storage backend
  • Automatic hierarchical memory isolation
1.12.0 New feature
Notable features
  • Native OpenAI-compatible providers
  • Qdrant Edge storage backend
  • Automatic root_scope for memory isolation
1.11.1 Security relevant
Security fixes
  • Path traversal protection in FileWriterTool
  • Security bumps in pypdf, tinytag, langchain-core
Notable features
  • flow_structure() serializer for Flow introspection
1.10.1 New feature
Security fixes
  • pypdf upgraded to 6.7.4
Notable features
  • Upgraded Gemini GenAI
  • Jupyter event loop support
  • Tool error injection as observations
1.10.0 Mixed
Breaking changes
  • Crew refactored to provider pattern
  • HITL refactored to provider pattern
Notable features
  • MCP complex $ref schema resolution
  • User input handling in Flows
  • Tool.specs auto-update
1.9.3 New feature
Notable features
  • a2a liteagent framework
  • a2a authentication
  • a2a file support
1.9.2 Bug fix

Fixed verbosity flag application and response JSON schema handling. Improved tool response processing.

1.9.1 New feature
Notable features
  • Before and after tool call hooks
  • Structured outputs support
  • Response format support
1.9.0 New feature
Notable features
  • Structured outputs and response formats
  • Keycloak SSO provider
  • Native multimodal file handling
1.8.1 New feature
Notable features
  • A2A task execution utilities
  • A2A server configuration
  • Additional A2A transports
1.8.0 New feature
Notable features
  • Production-ready Flows and Crews
  • HITL for Flows
  • Native a2a async chains

Beta — feedback welcome: [email protected]