python-1.0.1
1.0.1 - 2026-04-09
Important
Security hardening for FileCheckpointStorage: Checkpoint deserialization now flows through a restricted unpickler by default, which only permits a built-in set of safe Python types and all agent_framework framework types. If your application stores custom types in checkpoints, pass their "module:qualname" identifiers via the new allowed_checkpoint_types constructor parameter — otherwise loads will raise WorkflowCheckpointException. See Security Considerations for details and the opt-in format.
Added
- samples: Add sample documentation for two separate Neo4j context providers for retrieval and memory (#4010)
- agent-framework-azure-cosmos: Add Cosmos DB NoSQL checkpoint storage for Python workflows (#4916)
Changed
- docs: Remove pre-release flag from agent-framework installation instructions (#5082)
- samples: Revise agent examples in
README.md(#5067) - repo: Update
CHANGELOGwith v1.0.0 release (#5069) - agent-framework-core: [BREAKING] Fix handoff workflow context management and improve AG-UI demo (#5136)
- agent-framework-core: Restrict persisted checkpoint deserialization by default (#4941)
- samples: Bump
vitefrom 7.3.1 to 7.3.2 in/python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend(#5132) - python: Bump
cryptographyfrom 46.0.6 to 46.0.7 (#5176) - python: Bump
mcpfrom 1.26.0 to 1.27.0 (#5117) - python: Bump
mcp[ws]from 1.26.0 to 1.27.0 (#5119)
Fixed
- agent-framework-core: Raise clear handler registration error for unresolved
TypeVarannotations (#4944) - agent-framework-openai: Fix
response_formatcrash on background polling with empty text (#5146) - agent-framework-foundry: Strip tools from
FoundryAgentrequest whenagent_referenceis present (#5101) - agent-framework-core: Fix test compatibility for entity key validation (#5179)
- agent-framework-openai: Stop emitting duplicate reasoning content from
response.reasoning_text.doneandresponse.reasoning_summary_text.doneevents (#5162)
Full Changelog: python-1.0.0...python-1.0.1