Heads up This site is currently under heavy development.
Subscribe Get it delivered — the daily firehose, filtered to the tools you run, plus the documentation changes vendors never announce. Compare plans →

The AI Toolchain — issue -034, July 16, 2026

THE AI TOOLCHAIN NO. -034
Tail
THE DAILY RELEASE FIREHOSE
PUBLISHED JULY 16, 2026 · EVERY WEEKDAY
EDITIONS tail grep head diff uniq

The daily firehose — everything the toolchain shipped today, already filtered.

// HOW THIS ISSUE IS MADE

We read every release from the 174 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.

VIEW
ISSUE VIEW full issue
Do you prefer this view?
$ tct list   # 14 tools matched
AI & LLM Tooling
◆  AI Coding Agents

Cline

Sources Release notes → v4.0.9 NOTES

Autonomous coding agent as an SDK, IDE extension, or CLI assistant.

Cline v4.0.9 adds GPT-5.6 ChatGPT subscription model support.

└──▷ GET THIS VERSION
$ git clone --branch v4.0.9 https://github.com/cline/cline.git
# already have the repo? check out this version:
$ git checkout v4.0.9
  • Adds GPT-5.6 ChatGPT subscription models as selectable providers.
Was this useful?

Charm Crush

Sources Release notes → v0.85.0 NOTES

Glamourous agentic coding for all

Crush v0.85.0 adds a first-class question tool with single/multi-choice, free-text, and yes/no forms, plus an elapsed-time timer and LM Studio vision support.

└──▷ GET THIS VERSION
$ git clone --branch v0.85.0 https://github.com/charmbracelet/crush.git
# already have the repo? check out this version:
$ git checkout v0.85.0
  • Adds a question tool supporting single-choice, multiple-choice, free-form text, and yes/no question types, with the ability to chain questions into forms — includes full mouse support, mouse scrolling, paste support in text areas, and keyboard shortcuts for yes/no.
  • Adds an elapsed-seconds timer so you can see how long a running LLM task has been executing.
  • Wires LM Studio vision capabilities to SupportsImages, enabling image-input workflows with LM Studio models.
  • Auto-retries authentication transparently when it fails, via OnAuthRefresh integration.
Was this useful?

GitHub Copilot CLI

Sources Release notes → v1.0.71 NOTES

Copilot CLI v1.0.71 adds /voice device selection, canvas support, plugins marketplace subcommands, /worktree+/move split, and configurable subagent depth controls.

└──▷ GET THIS VERSION
$ git clone --branch v1.0.71 https://github.com/github/copilot-cli.git
# already have the repo? check out this version:
$ git checkout v1.0.71
└──▷ USE IT
Persist a curated set of GitHub MCP tools across sessions so only the tools your team needs are available.
json
{
  "githubMcpToolsets": ["repos", "issues"],
  "githubMcpTools": ["create_pull_request", "list_issues"]
}
Browse available plugin marketplaces and add a new one without leaving the CLI.
$ copilot plugins marketplace browse
copilot plugins marketplace add <marketplace-url>
  • Adds plugins marketplace subcommands to list, add, remove, browse, and update plugin marketplaces.
  • Persists GitHub MCP toolset and tool configuration via settings.json keys githubMcpToolsets, githubMcpTools, etc.
  • Adds /voice devices command to choose and persist the microphone used for voice mode.
  • Adds subagents.maxDepth setting (up to 128) to control maximum sub-agent nesting depth; default lowered from 6 to 4.
  • Adds a configurable maximum for Ctrl+R command history.
+29 moreshow less
  • Splits /worktree and /move into distinct commands: /worktree creates a new worktree leaving uncommitted changes behind, while new /move carries uncommitted changes into the new worktree.
  • Adds --add-github-mcp-tool "*" support to enable all GitHub MCP tools at once.
  • Adds canvas support in the CLI for extension-driven interactions.
  • Adds a pinned prompts setting in /settings to control prompt pinning.
  • Adds Repo and Repo (local) scope tabs to the /settings dashboard.
  • Marks disabled skills in copilot skill list and its JSON output.
  • Plan mode hard-blocks built-in tool calls that would modify the workspace (file edits and mutating shell commands) while planning; MCP and external tools remain allowed.
  • Honors COPILOT_TASK_WAIT_TIMEOUT_SECONDS in copilot -p --autopilot the same way plain -p does.
  • Honors --context in fresh interactive sessions.
  • Shows --plugin-dir plugins in copilot plugin list and surfaces --plugin-dir warnings in the terminal.
  • Validates --max-autopilot-continues to reject NaN, negative, and fractional values.
  • Rejects --continue when used with --resume.
  • Rejects malformed --allow-tool and --deny-tool patterns with an error message.
  • Allows copilot update and /update to accept stable as a channel.
  • Prompt mode exits non-zero when a --share or --share-gist export fails.
  • Adds local and cloud cost profiles to /chronicle cost-tips recommendations.
  • Refreshes memory context after 30 minutes in long-lived sessions.
  • Shows repo-enabled plugins in /plugin list and skill pickers.
  • Bare copilot mcp and copilot skill now print help and exit 0, matching copilot plugin; use copilot mcp <subcommand> --help or copilot skill <subcommand> --help for subcommand help.
  • Honors NO_COLOR in the CLI even when chalk has cached a color level.
  • Enforces the sandbox filesystem policy on LSP file reads and rename edits.
  • Server mode reconnects OAuth MCP servers from cached tokens.
  • Uses ctrl+x → x to close a session and ctrl+x → h to hide the split sidebar.
  • Shows retained shell output in /tasks Shell Details for finished tasks.
  • Highlights standalone hex colors inline in Markdown.
  • Shows an error when --name is used with --session-id for an existing session.
  • Switching to autopilot mid-turn now auto-answers questions asked during that same turn.
  • Shows the startup banner only on the first launch when set to once.
  • Startup now shows a warning identifying offending values in an invalid settings.json instead of silently ignoring settings.
└──▷ BREAKING ON UPGRADE
  • !The default maximum sub-agent nesting depth is lowered from 6 to 4; setups relying on recursive sub-agent delegation beyond depth 4 will be blocked unless subagents.maxDepth is explicitly raised.
  • !/worktree no longer carries uncommitted changes into the new worktree — use the new /move command for that behavior.
  • !--continue is now rejected when used together with --resume.
  • !Bare copilot mcp and copilot skill now print help and exit 0 instead of running a default action; the implicit help <subcommand> form is not supported — use copilot mcp <subcommand> --help or copilot skill <subcommand> --help instead.
Was this useful?

Earendil Works Pi

Sources Release notes → v0.80.10 3 RELEASES · 2026-07-16 NOTES STABLE

AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

Pi v0.80.10 adds Kimi Coding adaptive thinking support with max level and empty-signature thinking block replay for K3.

└──▷ GET THIS VERSION
$ git clone --branch v0.80.10 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.80.10
  • Kimi Coding models now use adaptive thinking correctly; K3 exposes its supported max thinking level and supports replaying empty-signature thinking blocks.
2 more releases in this issue · 2026-07-16
v0.80.9 NOTES STABLE

Pi v0.80.9 adds Kimi K3 support across built-in providers with deferred tool loading via Kimi's native protocol.

└──▷ GET THIS VERSION
$ git clone --branch v0.80.9 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.80.9
  • Adds kimi-deferred-tools.ts example demonstrating extension-driven deferred tool activation through Kimi's native protocol for progressive tool loading.
  • Adds Kimi K3 model support across Kimi Coding, Moonshot AI, Moonshot AI China, OpenRouter, and Vercel AI Gateway providers.
  • Changes default xAI model to Grok 4.5 with a prefilled device-authorization link labeled 'Sign in with SuperGrok or X Premium'.
└──▷ BREAKING ON UPGRADE
  • !Grok 3, Grok 3 Fast, Grok 4.20 variants, and Grok Code Fast 1 are removed from the built-in xAI model catalog — any configuration referencing these models will break on upgrade.
v0.80.8 NOTES STABLE

Pi v0.80.8 adds unified model auth via ModelRuntime, pi update --models, and xAI Grok 4.5 with device-code OAuth.

└──▷ GET THIS VERSION
$ git clone --branch v0.80.8 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.80.8
└──▷ TRY IT
Force a fresh pull of the model catalog across all configured providers without upgrading pi itself.
$ pi update --models
  • Adds pi update --models CLI flag to force an immediate model catalog refresh without updating pi or extensions.
  • Adds ModelRuntime as the canonical async SDK facade; ModelRuntime.create() accepts any pi-ai CredentialStore via its credentials option, and ModelRuntime.getAuth() handles provider-scoped and model-scoped request auth assembly.
  • Adds /login discovery directly from registered pi-ai providers, exposing ambient auth status and informational links per provider.
  • Adds file-backed dynamic model catalogs stored in models-store.json, with per-provider pi.dev catalog overlays and Radius gateway support.
  • Adds refreshModels(context) hook for extensions to perform dynamic model discovery with optional provider-controlled persistence.
+2 moreshow less
  • Adds xAI device-code OAuth login and Grok 4.5 OpenAI Responses support, with low, medium, and high thinking levels.
  • Updates /model to render the current model snapshot immediately and refresh configured providers in the background, surfacing partial results or timeout errors in the open selector.
└──▷ BREAKING ON UPGRADE
  • !CreateAgentSessionOptions.authStorage and modelRegistry options are replaced by the async modelRuntime option; AuthStorage and its storage backends are no longer exported — use ModelRuntime, a custom pi-ai CredentialStore, or readStoredCredential() for one-off reads of auth.json.
  • !ModelRuntime.getAll(), find(), getSnapshot(), and getAuthOptions() are removed; use the pi-ai Models methods getModels(), getModel(), getProviders(), and checkAuth() directly.
  • !Request-auth assembly via ModelRegistry.getApiKeyAndHeaders() is replaced by ModelRuntime.getAuth(); passing a provider ID returns provider-scoped auth, passing a model also resolves built-in, models.json, and extension model headers.
  • !ModelRegistry.refresh() changed from synchronous void to Promise<void>; extensions must await it before making synchronous registry reads.
Was this useful?

Alibaba Qwen Code

Sources Release notes → v0.19.11 NOTES

Qwen Code v0.19.11 adds /learn, archived session export, DingTalk DMs, general.notificationMode, and MCP workspace management.

└──▷ GET THIS VERSION
$ git clone --branch v0.19.11 https://github.com/QwenLM/qwen-code.git
# already have the repo? check out this version:
$ git checkout v0.19.11
└──▷ TRY IT
Teach the agent a reusable skill from the CLI so it can recall and apply it in future sessions.
$ /learn
  • Adds general.notificationMode config key to silence per-approval notifications selectively.
  • Adds /learn command for user-initiated skill creation directly from the CLI.
  • Changes the default approval mode from default to auto.
  • Adds archived session export via the CLI (feat(cli): Add archived session export).
  • Adds stateless generation SSE endpoint to the daemon for streaming without session state.
+18 moreshow less
  • Adds workspace MCP management via the serve layer, enabling per-workspace MCP server control.
  • Adds structured channel memory management with support for natural memory references.
  • Supports DingTalk webhook delivery to direct messages (in addition to group channels).
  • Emits liveness heartbeats for silent foreground shell commands, preventing false timeout detection.
  • Adds a PDF vision bridge fallback so PDF content can be processed when primary vision path is unavailable.
  • Adds aggregate deep health reporting across workspaces in the daemon.
  • Exposes tool-call preparation lifecycle events via the ACP layer.
  • Adds workspace path lock in the web-shell to prevent accidental workspace switches.
  • Adds an extension management page in the web-shell UI.
  • Adds zoom, pan, and drag controls to Mermaid diagram rendering in the web-shell.
  • Adds the ability to maximize a single split pane in the web-shell split view.
  • Color-codes each split pane by workspace for at-a-glance orientation in multi-workspace sessions.
  • Auto-posts visual previews (screenshots and flow GIFs) on PRs from the web-shell.
  • Shows sessions awaiting user action in a dedicated web-shell view.
  • Adds immutable session source metadata to daemon sessions.
  • Tags daemon sessions with their originating channel source.
  • Adds VP mode UX improvements to the CLI interface.
  • Builds Step 4 (verify) and Step 5 (reverse-audit) prompts into the review pipeline and proves they ran.
Was this useful?
◆  AI Agent Frameworks

CrewAI

Sources Release notes → 1.15.3 NOTES

Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.

CrewAI 1.15.3 adds step interception points, an @on hook dispatcher, and declarative flow support in the TUI.

└──▷ GET THIS VERSION
$ git clone --branch 1.15.3 https://github.com/crewAIInc/crewAI.git
# already have the repo? check out this version:
$ git checkout 1.15.3
└──▷ USE IT
Intercept a specific execution boundary in a crew run to log or mutate state at that step.
python
from crewai import on

@on('after_llm_call')
def inspect_llm_output(context):
    print(context)
  • Adds step interception points and a generic @on hook dispatcher for wiring execution-boundary hooks at precise points in agent and crew execution.
  • Adds an organization_id parameter to the PlusAPI client for multi-org API targeting.
  • Runs declarative flows on the TUI with a headless terminal fallback.
Was this useful?

PydanticAI

Sources Release notes → v2.11.0 NOTES

PydanticAI v2.11.0 exports HistoryProcessor and adds actionable hints to usage-limit and tool-retry errors.

└──▷ GET THIS VERSION
$ git clone --branch v2.11.0 https://github.com/pydantic/pydantic-ai.git
# already have the repo? check out this version:
$ git checkout v2.11.0
└──▷ USE IT
Import HistoryProcessor directly to build a custom history filter that trims old messages before each agent run.
python
from pydantic_ai import HistoryProcessor
  • Exports HistoryProcessor from the public API, making it directly importable for custom conversation-history handling.
  • Adds actionable hint messages to usage-limit and tool-retry errors, surfacing guidance at the point of failure.
Was this useful?
◆  AI Model & Data Infrastructure

Ollama

Sources Release notes → v0.32.1 NOTES

Get up and running with Kimi-K2.6, GLM-5.2, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

Ollama v0.32.1 improves Gemma 4 tool calling, MLX timeout support, and agent context awareness.

└──▷ GET THIS VERSION
$ git clone --branch v0.32.1 https://github.com/ollama/ollama.git
# already have the repo? check out this version:
$ git checkout v0.32.1
  • MLX text model loading now respects the OLLAMA_LOAD_TIMEOUT environment variable, enabling timeout control for MLX backends.
  • The interactive agent now receives the current working directory, giving models better project context during sessions.
  • Agent web search and fetch now prompt users to run ollama signin when authentication is required.
  • Improved Gemma 4 tool calling and multi-turn reasoning, including more reliable tool-response continuations.
Was this useful?

emisar

Sources Release notes → v0.29.0 4 RELEASES · 2026-07-16 NOTES STABLE

An MCP that lets AI tools securely connect to your infrastructure, write IaaS code, debug issues, and assist during incidents - without risking production stability. Built for security teams to approve and infrastructure teams to experience like magic.

Emisar v0.29.0 tightens MCP argument coercion, sharpens error messages, and trims run summary payloads.

└──▷ GET THIS VERSION
$ git clone --branch v0.29.0 https://github.com/AndrewDryga/emisar.git
# already have the repo? check out this version:
$ git checkout v0.29.0
  • MCP now coerces scalar arguments sent as canonical strings — e.g. "limit": "50" or "dry_run": "true" — instead of failing the call, while true type mismatches name the field and the JSON type it was sent as (e.g. limit must be a JSON integer from 1 to 100; it was sent as a string.).
  • MCP argument fault messages now name the offending field in every case: malformed refs advise copying the exact value from a prior tool result, enum faults list allowed values, and unknown arguments are spelled out against the allowed set.
  • MCP run summaries drop zero-information fields: streams with no bytes omit stdout/stderr, byte-count, and truncation fields; output_complete appears only when false; and per-stream SHA-256 digests are removed from the MCP projection (they remain on the run detail page and audit record), shrinking a typical terse summary by about a third.
  • Disabling two-factor authentication now requires a fresh step-up challenge, preventing a hijacked session from quietly weakening an account.
  • Production session cookies now always carry the Secure flag.
+3 moreshow less
  • Secret-dense config and environment dumps — cloud-init user/vendor data and cloud-config, pm2 env, nginx and caddy config dumps — are reclassified from risk level low to medium, matching linux.sudoers_dump, so they no longer ride the ungated low-read path.
  • Redis ACL password hashes are redacted from acl_list and acl_getuser output, preventing ungated reads from leaking crackable material.
  • Exec-style arguments across docker, systemctl, podman, minio, and related tools now anchor their first character to an alphanumeric, blocking hostile values from being parsed as leading-dash flags.
└──▷ BREAKING ON UPGRADE
  • !Per-stream SHA-256 digests are removed from the MCP run summary projection; any client parsing those fields from summary responses will find them absent (they remain on the run detail page and audit record).
  • !MCP run summary response no longer includes stdout/stderr, byte-count, truncation, or output_complete fields when they carry no information; clients that treat the absence of these fields as an error condition will need to be updated.
  • !Secret-dense config/environment dump packs (cloud-init user/vendor data and cloud-config, pm2 env, nginx and caddy config dumps) are reclassified from risk low to medium and no longer ride the ungated low-read path; workflows relying on ungated access to these dumps will require elevated authorization.
3 more releases in this issue · 2026-07-16
v0.28.0 NOTES STABLE

emisar v0.28.0 adds dispatch-log verification, fleet diagnostics in MCP, SSO/MFA route coverage, SCIM rate-limiting, and GDPR erasure tasks.

└──▷ GET THIS VERSION
$ git clone --branch v0.28.0 https://github.com/AndrewDryga/emisar.git
# already have the repo? check out this version:
$ git checkout v0.28.0
└──▷ TRY IT
Check dispatch-log health in a post-upgrade CI or runbook script to catch bad state before the service goes live.
$ emisar state check-dispatch-log
Automatically quarantine a corrupt dispatch log during an unattended upgrade so the host does not crash-loop.
$ QUARANTINE_DISPATCH_LOG=1 bash install.sh
Inspect runner health — dispatch log state, degraded packs, and last cloud rejection — from a single operator command.
$ emisar doctor
  • Adds QUARANTINE_DISPATCH_LOG=1 environment variable to install.sh to automatically quarantine an unreadable dispatch log during upgrades instead of leaving a host crash-looping.
  • emisar doctor now checks the dispatch log, reports degraded packs, and surfaces the last cloud rejection.
  • Adds emisar state check-dispatch-log subcommand for scripted dispatch-log verdict checks.
  • install.sh now verifies dispatch state with the staged binary before touching a running service, aborting with remediation options on failure.
  • Degraded packs now surface as named 'pack X failed to load on runner Y' entries in MCP list_runners output and as an amber notice with reinstall remedy on the runner detail page.
+10 moreshow less
  • Denied runs now return a bounded policy reason in MCP summaries.
  • find_actions supports natural multi-term queries.
  • Console-created runbooks are now visible and executable over MCP.
  • Outbound connections now enforce a TLS 1.2 floor.
  • Sign-in enforcement for Require SSO and Require MFA now covers every controller route.
  • SCIM, audit-export, and runner-register endpoints are now rate-limited.
  • Account and user erasure (GDPR delete) is available as an operator-run release task.
  • Adds direct alerts for database-down, zero-healthy-backend, and portal VM saturation conditions.
  • docs/COMPATIBILITY.md now documents on-host runner state (dispatch log, installed pack trees) as a compatibility surface with migration rules.
  • Runner binary ships as runner-v0.13.0 with SLSA-3 build provenance and SHA256SUMS.
v0.27.0 NOTES STABLE

Runner v0.12.0 adds durable dispatch journaling, startup integrity checks, and clearer MCP failure reporting.

└──▷ GET THIS VERSION
$ git clone --branch v0.27.0 https://github.com/AndrewDryga/emisar.git
# already have the repo? check out this version:
$ git checkout v0.27.0
  • Corrupt durable dispatch state now halts the runner before it connects to the control plane, preventing split-brain dispatch records.
  • Failure causes redact sensitive action arguments before they reach local audit records or the portal.
  • MCP run summaries include a bounded terminal failure message when the runner provides one, surfacing failure detail directly in the portal.
  • OAuth consent now lets a person choose which account to connect during connector setup.
  • Key-bearing connector commands are kept out of shell history.
+2 moreshow less
  • A newer non-destructive production plan supersedes an older pending plan, with Terraform confirmation as the single human apply gate.
  • Unsigned installations no longer open or lock signing nonce state during startup.
└──▷ BREAKING ON UPGRADE
  • !Runner v0.12.0 starts a new durable dispatch journal and does not import older unacknowledged entries; upgrade directly to runner-v0.12.0 with no pending dispatches in flight.
  • !Downgrading to an earlier runner is unsupported once runner-v0.12.0 has written new dispatch records.
v0.26.0 NOTES STABLE

Emisar v0.26.0 recovers in-flight runs after runner reconnects and flags out-of-date MCP bridge versions in the console.

└──▷ GET THIS VERSION
$ git clone --branch v0.26.0 https://github.com/AndrewDryga/emisar.git
# already have the repo? check out this version:
$ git checkout v0.26.0
  • Control plane now recovers runs that were in-flight when a runner drops and reconnects, instead of stranding them.
  • LLM agents list in the console now groups connections by the operator behind each key, shows the emisar-mcp bridge version inline per connection, and flags an out-of-date bridge one step from the upgrade command.
  • Runner version-upgrade notice now scopes its count to the current page (e.g., '1 runner on this page is below the supported range') rather than implying a single runner across the whole list.
  • Runner binary runner-v0.11.0 ships with SLSA-3 build provenance and SHA256SUMS published by its release workflow.
Was this useful?
◆  Local LLM Runtimes

llama.cpp

Sources Release notes → b10045 4 RELEASES · 2026-07-16 NOTES STABLE

llama.cpp server gains text-only slot save/restore support for multimodal (mtmd) sessions

└──▷ GET THIS VERSION
$ git clone --branch b10045 https://github.com/ggml-org/llama.cpp.git
# already have the repo? check out this version:
$ git checkout b10045
  • Adds text-only slot save/restore capability to the server when running with multimodal (mtmd) support, enabling KV-cache slot persistence for text portions of multimodal sessions.
3 more releases in this issue · 2026-07-16
b10043 NOTES STABLE

llama.cpp b10043 adds CUDA Virtual Device support, enabling multi-GPU splits across virtual device boundaries.

└──▷ GET THIS VERSION
$ git clone --branch b10043 https://github.com/ggml-org/llama.cpp.git
# already have the repo? check out this version:
$ git checkout b10043
  • Adds CUDA Virtual Device support, allowing llama.cpp to treat virtual CUDA devices as distinct GPU backends (NCCL path is automatically disabled when virtual devices are in use).
b10042 NOTES STABLE

llama.cpp b10042 enables CUDA graphs on Volta and Turing GPUs for improved inference throughput.

└──▷ GET THIS VERSION
$ git clone --branch b10042 https://github.com/ggml-org/llama.cpp.git
# already have the repo? check out this version:
$ git checkout b10042
  • Enables CUDA graphs support on Volta and Turing GPU architectures, unlocking lower kernel-launch overhead and higher inference throughput on older NVIDIA hardware.
b10037 NOTES STABLE

llama.cpp b10037 lets --pure quantization mode coexist with manual per-tensor type overrides.

└──▷ GET THIS VERSION
$ git clone --branch b10037 https://github.com/ggml-org/llama.cpp.git
# already have the repo? check out this version:
$ git checkout b10037
  • Allows manual tensor type overrides to be combined with --pure during quantization, so practitioners can pin specific tensors to a chosen quant type while still enforcing a pure quantization pass for the rest of the model.
Was this useful?
Other / Uncategorized
◆  MCP TOOLING

Composio

Sources Release notes → @composio/[email protected] 2 RELEASES · 2026-07-16 NOTES STABLE

Composio experimental adds EveProvider with native defineTool support, step resolvers, and middleware hooks for Tool Router calls.

└──▷ GET THIS VERSION
$ git clone --branch @composio/[email protected] https://github.com/ComposioHQ/composio.git
# already have the repo? check out this version:
$ git checkout @composio/[email protected]
  • Adds EveProvider, which makes session.tools() return eve-native defineTools for direct integration with the Eve runtime.
  • Adds defineComposioTools as a replay-safe step.started resolver for use with EveProvider.
  • Supports (ctx, next) middleware hooks on Tool Router meta-tool calls, enabling callers to rewrite, deny, or transform requests before they execute.
  • Preserves successful local-tool results when the remote half of a mixed COMPOSIO_MULTI_EXECUTE_TOOL batch fails at the transport layer, so callers can inspect which side effects completed before retrying.
1 more release in this issue · 2026-07-16
@composio/[email protected] NOTES STABLE

Composio @composio/[email protected] adds an Eve provider, SSRF/secret guardrails, and server-side trigger connection resolution.

└──▷ GET THIS VERSION
$ git clone --branch @composio/[email protected] https://github.com/ComposioHQ/composio.git
# already have the repo? check out this version:
$ git checkout @composio/[email protected]
└──▷ USE IT
Block SSRF attacks when uploading a user-supplied URL during tool execution — ComposioBlockedInternalUrlError is thrown for any private or metadata endpoint.
javascript
import { ComposioBlockedInternalUrlError } from '@composio/core';

try {
  await composio.files.upload('http://169.254.169.254/latest/meta-data/');
} catch (err) {
  if (err instanceof ComposioBlockedInternalUrlError) {
    console.error('Blocked SSRF attempt:', err.message);
  }
}
Share the sensitive-file-upload denylist guard across packages to prevent uploads of credential or config files.
javascript
import { assertSafeFileUploadPath, isBlockedSensitiveFileUploadPath, BUILTIN_FILE_UPLOAD_PATH_DENY_SEGMENTS } from '@composio/core';

// Throws if path matches a blocked segment (e.g. ~/.ssh/id_rsa)
assertSafeFileUploadPath('/home/user/.ssh/id_rsa');

// Or check without throwing
if (isBlockedSensitiveFileUploadPath('/etc/passwd')) {
  console.warn('Blocked sensitive file upload');
}
  • Adds EveProvider with session.tools() returning eve-native defineTools, defineComposioTools as a replay-safe step.started resolver, and (ctx, next) hooks to rewrite, deny, or transform Tool Router meta-tool calls.
  • Exports assertSafeFileUploadPath, isBlockedSensitiveFileUploadPath, and BUILTIN_FILE_UPLOAD_PATH_DENY_SEGMENTS from the package root so downstream packages share one sensitive-file-upload denylist implementation.
  • Adds SSRF guard to composio.files.upload(url) and automatic file uploads: resolves hosts, blocks private/loopback/link-local (including 169.254.169.254)/CGNAT/reserved addresses, rejects non-http(s) schemes, and re-validates each redirect hop; blocked requests throw ComposioBlockedInternalUrlError.
  • Adds telemetry redaction that strips URL query strings, Authorization bearer/basic credentials, and secret-like key=value pairs (API keys, tokens, client secrets, passwords) from error.message and error.stack before transport.
  • Adds a realpathSync method to the internal #platform abstraction, making the file-upload denylist guard edge/workerd-safe with no static node:* imports.
+3 moreshow less
  • Preserves successful local-tool results when the remote half of a mixed COMPOSIO_MULTI_EXECUTE_TOOL batch fails at the transport layer, so callers can identify which side effects completed before retrying.
  • OpenAIProvider.handleToolCalls now executes every parallel tool call in an assistant message (sequentially, in model-returned order), answering each tool_call_id exactly once.
  • Treats local file paths beginning with http as paths rather than URLs so upload allowlist and sensitive-file denylist checks still run.
└──▷ BREAKING ON UPGRADE
  • !triggers.create no longer throws ComposioConnectedAccountNotFoundError for a missing or invalid connection when connectedAccountId is omitted; that error now surfaces as the backend error from the upsert call. Self-hosted deployments must be on a backend version that includes platform#10932 (resolves trigger connection from user_id on upsert) or triggers.create will fail.
Was this useful?
◆  AI OBSERVABILITY

Langfuse

Sources Release notes → v3.218.0 3 RELEASES · 2026-07-16 NOTES STABLE

Langfuse v3.218.0 adds eval job configurations to core data S3 export and forces EVENTS export source on events_only self-hosted deployments.

└──▷ GET THIS VERSION
$ git clone --branch v3.218.0 https://github.com/langfuse/langfuse.git
# already have the repo? check out this version:
$ git checkout v3.218.0
  • Includes eval job configurations in the core data S3 export, so evaluation setup is captured alongside trace data.
2 more releases in this issue · 2026-07-16
v3.216.0 NOTES STABLE

Langfuse v3.216.0 adds metadata filtering for sessions, dashboard/widget CRUD to the Public API and MCP, and blob export deprecation notices.

└──▷ GET THIS VERSION
$ git clone --branch v3.216.0 https://github.com/langfuse/langfuse.git
# already have the repo? check out this version:
$ git checkout v3.216.0
  • Adds dashboard and widget CRUD endpoints to the Public API and MCP server (marked unstable).
  • Enables metadata filtering on sessions in the v4 sessions view.
  • Writes a deprecation notice into blob exports for legacy export sources.
v3.215.0 NOTES STABLE

Langfuse v3.215.0 adds facet-filter suggestions in the search bar, Sentry error IDs on crash pages, and an agent sandbox.

└──▷ GET THIS VERSION
$ git clone --branch v3.215.0 https://github.com/langfuse/langfuse.git
# already have the repo? check out this version:
$ git checkout v3.215.0
  • Search bar now suggests matching facet filters as you type bare search terms, making it faster to narrow traces and observations.
  • Adds a sandbox environment for the agent, enabling isolated agent execution.
Was this useful?

Weights & Biases Weave

Sources Release notes → v0.53.2 NOTES

Weave v0.53.2 adds agent span feedback, eval metadata stamping, conversation signal filtering, server-side ingest sampling, and Base64/Data URL content ref conversion.

└──▷ GET THIS VERSION
$ git clone --branch v0.53.2 https://github.com/wandb/weave.git
# already have the repo? check out this version:
$ git checkout v0.53.2
  • Adds SubAgent.start_subagent() method and nests LLM/Tool/SubAgent spans under Turn and SubAgent in the Python SDK for structured agent trace hierarchies.
  • Adds column_visibility field to ComparisonViewDefinition to control column display in comparison views.
  • Adds scorer_trace_id field denormalized onto feedback records, linking scorer traces directly to feedback entries.
  • Adds first-class SDK feedback for agent spans and turns, enabling programmatic feedback submission on agent traces.
  • Adds agent eval span fields and stamps eval metadata onto agent spans for evaluation traceability.
+7 moreshow less
  • Adds server-side ingest sampling for the spans model, letting operators reduce span volume at the server level.
  • Adds Base64 and Data URL content ref conversion, enabling binary/media content to be stored and referenced as content objects.
  • Adds ObjDeleteRes response that reports deleted versions when objects are deleted.
  • Adds backend support to filter agent conversations by signals (tags and ratings).
  • Exports the API contract (export api contract) for the Weave server.
  • Defaults the JavaScript client to the calls_complete ingest path for improved write performance.
  • Nests LLM/Tool/SubAgent spans under a SubAgent in the TypeScript SDK (TS SDK v0.16.3).
Was this useful?
◆  VECTOR DB RAG

Weaviate

Sources Release notes → v1.38.5 NOTES

Weaviate v1.38.5 adds a structured where-filter to the MCP hybrid search tool and warns when usage collection cycles overlap.

└──▷ GET THIS VERSION
$ git clone --branch v1.38.5 https://github.com/weaviate/weaviate.git
# already have the repo? check out this version:
$ git checkout v1.38.5
  • Exposes a structured where-filter on the MCP hybrid search tool, enabling filtered hybrid search through the MCP interface.
  • Adds a warning when usage collection cycles overlap the configured collection interval, surfacing capacity issues in usage accounting.
Was this useful?
my-toolchain — 0 tools
paste an install list to detect your tools

A brew list, a Brewfile, requirements.txt, a Dockerfile — or just the product names, free-form. Nothing leaves your browser.

    browse all tools →