Skip to content

python-1.0.1

Choose a tag to compare

@moonbox3 moonbox3 released this 10 Apr 03:23
· 78 commits to main since this release
4a36f10

1.0.1 - 2026-04-09

Important

Security hardening for FileCheckpointStorage: Checkpoint deserialization now flows through a restricted unpickler by default, which only permits a built-in set of safe Python types and all agent_framework framework types. If your application stores custom types in checkpoints, pass their "module:qualname" identifiers via the new allowed_checkpoint_types constructor parameter — otherwise loads will raise WorkflowCheckpointException. See Security Considerations for details and the opt-in format.

Added

  • samples: Add sample documentation for two separate Neo4j context providers for retrieval and memory (#4010)
  • agent-framework-azure-cosmos: Add Cosmos DB NoSQL checkpoint storage for Python workflows (#4916)

Changed

  • docs: Remove pre-release flag from agent-framework installation instructions (#5082)
  • samples: Revise agent examples in README.md (#5067)
  • repo: Update CHANGELOG with v1.0.0 release (#5069)
  • agent-framework-core: [BREAKING] Fix handoff workflow context management and improve AG-UI demo (#5136)
  • agent-framework-core: Restrict persisted checkpoint deserialization by default (#4941)
  • samples: Bump vite from 7.3.1 to 7.3.2 in /python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend (#5132)
  • python: Bump cryptography from 46.0.6 to 46.0.7 (#5176)
  • python: Bump mcp from 1.26.0 to 1.27.0 (#5117)
  • python: Bump mcp[ws] from 1.26.0 to 1.27.0 (#5119)

Fixed

  • agent-framework-core: Raise clear handler registration error for unresolved TypeVar annotations (#4944)
  • agent-framework-openai: Fix response_format crash on background polling with empty text (#5146)
  • agent-framework-foundry: Strip tools from FoundryAgent request when agent_reference is present (#5101)
  • agent-framework-core: Fix test compatibility for entity key validation (#5179)
  • agent-framework-openai: Stop emitting duplicate reasoning content from response.reasoning_text.done and response.reasoning_summary_text.done events (#5162)

Full Changelog: python-1.0.0...python-1.0.1