Update to version v4.1.0

 ### Added
  
 - MCP Server target configuration support in MCP Server use case.
  
 ### Changed
  
 - Upgraded langchain-aws and dependent packages with migration from deprecated modules to langchain_core and langchain_classic.
 - Refactored info panel content for all use case types in view details page.
  
 ### Fixed
  
 - Bug where removing already deleted MCP servers from an Agent Builder usecase would cause errors.
 - Issue with workflow review page not displaying system prompt formatting correctly.
 - Bug where failed memory creation would also cause deletion to fail.
  
 ### Security
  
 - Upgraded python-multipart to `0.0.22` to mitigate [CVE-2024-53981](https://avd.aquasec.com/nvd/cve-2024-53981/)
 - Upgraded lodash to `4.17.23` to mitigate [CVE-2025-13465](https://avd.aquasec.com/nvd/cve-2025-13465/)
 - Upgraded diff to `4.0.4` and `5.2.2` to mitigate [CVE-2026-24001](https://avd.aquasec.com/nvd/cve-2026-24001/)
 - Upgraded @smithy/config-resolver to `4.4.6` to mitigate [GHSA-6475-r3vj-m8vf](GHSA-6475-r3vj-m8vf)
 - Upgraded wheel to `0.46.3` to mitigate [GHSA-8rrh-rw8j-w5fx](GHSA-8rrh-rw8j-w5fx)

Author: tabdunabi

.viperlightignore

@@ -0,0 +1 @@
+# Empty .viperlightignore created - none existed

.viperlightrc

@@ -0,0 +1 @@
+{"failOn":"low","all":true}

CHANGELOG.md

@@ -5,6 +5,31 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.1.0] - 2026-01-29
+
+### Added
+
+- MCP Server target configuration support in MCP Server use case.
+
+### Changed
+
+- Upgraded langchain-aws and dependent packages with migration from deprecated modules to langchain_core and langchain_classic.
+- Refactored info panel content for all use case types in view details page.
+
+### Fixed
+
+- Bug where removing already deleted MCP servers from an Agent Builder usecase would cause errors.
+- Issue with workflow review page not displaying system prompt formatting correctly.
+- Bug where failed memory creation would also cause deletion to fail.
+
+### Security
+
+- Upgraded python-multipart to `0.0.22` to mitigate [CVE-2024-53981](https://avd.aquasec.com/nvd/cve-2024-53981/)
+- Upgraded lodash to `4.17.23` to mitigate [CVE-2025-13465](https://avd.aquasec.com/nvd/cve-2025-13465/)
+- Upgraded diff to `4.0.4` and `5.2.2` to mitigate [CVE-2026-24001](https://avd.aquasec.com/nvd/cve-2026-24001/)
+- Upgraded @smithy/config-resolver to `4.4.6` to mitigate [GHSA-6475-r3vj-m8vf](https://github.com/advisories/GHSA-6475-r3vj-m8vf)
+- Upgraded wheel to `0.46.3` to mitigate [GHSA-8rrh-rw8j-w5fx](https://github.com/advisories/GHSA-8rrh-rw8j-w5fx)
+
 ## [4.0.4] - 2026-01-13
 
 ### Fixed

NOTICE.txt

@@ -1303,9 +1303,17 @@ klaw-sync under the MIT license.
 kleur under the MIT license.
 langchain under the MIT license.
 langchain-aws under the MIT license.
+langchain-classic under the MIT license.
 langchain-core under the MIT license.
 langchain-text-splitters under the MIT license.
 langsmith under the MIT license.
+langgraph under the MIT license.
+langgraph-checkpoint under the MIT license.
+langgraph-prebuilt under the MIT license.
+langgraph-sdk under the MIT license.
+ormsgpack under the Apache-2.0 license.
+uuid-utils under the MIT license.
+xxhash under the BSD-2-Clause license.
 launch-editor under the MIT license.
 lazy-ass under the MIT license.
 leven under the MIT license.
@@ -1548,7 +1556,7 @@ pump under the MIT license.
 punycode under the MIT license.
 pure-rand under the MIT license.
 pyasn1 under the BSD-2-Clause license.
-pycparser under the 0BSD license.
+pycparser under the BSD-3-Clause license.
 pydantic under the MIT license.
 pydantic-core under the MIT license.
 pyjwt under the MIT license.

deployment/cdk-solution-helper/package-lock.json

@@ -1,10 +1,10 @@
 {
   "name": "@amzn/cdk-solution-helper",
-  "version": "0.1.0",
+  "version": "4.1.0",
   "description": "This script performs token replacement as part of the build pipeline",
   "license": "Apache-2.0",
   "author": {
     "name": "Amazon Web Services",
     "url": "https://aws.amazon.com/solutions"
   }
-}
+}

deployment/cdk-solution-helper/package.json

@@ -1,6 +1,6 @@
 [project]
 name = "gaab-strands-agent"
-version = "4.0.4"
+version = "4.1.0"
 description = "GAAB Strands Agent Runtime for Amazon Bedrock AgentCore"
 readme = "README.md"
 requires-python = ">=3.13"
@@ -14,7 +14,7 @@ classifiers = [
 dependencies = [
     "setuptools>=70.0.0",
     "pip>=25.0",
-    "wheel>=0.42.0",
+    "wheel>=0.46.2",
 
     # AWS SDK
     "boto3>=1.35.0",

deployment/ecr/gaab-strands-agent/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "gaab-strands-common"
-version = "0.1.0"
+version = "4.1.0"
 description = "Shared library for GAAB Strands agents"
 readme = "README.md"
 requires-python = ">=3.13"

deployment/ecr/gaab-strands-agent/uv.lock

@@ -59,7 +59,7 @@ def __init__(self, config: Dict[str, Any], region: str):
         logger.debug(f"Initialized S3FileReaderTool for bucket: {self.bucket_name}")
 
     @tool
-    def s3_file_reader(self, tool_input: ToolUse) -> ToolResult:
+    def s3_file_reader(self, s3_key: str) -> ToolResult:
         """
         Read files from S3 and return content in model-readable format.
 
@@ -69,28 +69,24 @@ def s3_file_reader(self, tool_input: ToolUse) -> ToolResult:
         automatically detects file type and formats content appropriately for processing.
 
         Args:
-            tool_input: ToolUse object containing:
-                - s3_key (str, required): S3 object key/path (e.g., 'uploads/document.pdf')
-
+            s3_key (str, required): S3 object key/path (e.g., 'uploads/document.pdf')
 
         Returns:
             ToolResult with status "success" or "error":
             - Success: Returns image or document block with format and binary content
             - Error: Returns descriptive error message for invalid input, unsupported format,
             file not found, or S3 access issues
         """
-        # Initialize variables with defaults
-        tool_use_id = "unknown"
-        s3_key = "unknown"
-
         try:
-            tool_use_id = tool_input["toolUseId"]
-            tool_use_input = tool_input["input"]
-
-            if "s3_key" not in tool_use_input:
+            if not isinstance(s3_key, str):
+                tool_use_id = "s3_file_reader_invalid"
+                return self._create_error_result(tool_use_id, "S3 key must be a string")
+            
+            if not s3_key or not s3_key.strip():
+                tool_use_id = "s3_file_reader_empty"
                 return self._create_error_result(tool_use_id, "S3 key is required")
-
-            s3_key = tool_use_input["s3_key"]
+            
+            tool_use_id = f"s3_file_reader_{hash(s3_key) % 10000}"
 
             # Validate and normalize the S3 key
             validation_result = self._validate_and_normalize_s3_key(s3_key)