Bump agents from 0.0.109 to 0.3.7 by dependabot[bot] · Pull Request #19 · vivekrp/youfirst-mcp

dependabot · 2026-02-03T18:43:44Z

Bumps agents from 0.0.109 to 0.3.7.

Release notes

agents@0.3.7 Release Notes

This release introduces Cloudflare Workflows integration for durable multi-step processing, secure email reply routing with HMAC-SHA256 signatures, 15+ new documentation files, and significant improvements to state management, the callable RPC system, and scheduling.

agents@0.3.6

Patch Changes

#786 395f461 Thanks @deathbyknowledge! - fix: allow callable methods to return this.state

#783 f27e62c Thanks @Muhammad-Bin-Ali! - fix saving initialize params for stateless MCP server (effects eliciations and other optional features)

Updated dependencies [93c613e]:

@cloudflare/codemode@0.0.5

agents@0.3.5

Patch Changes

#752 473e53c Thanks @mattzcarey! - bump mcp sdk version to 1.25.2. changes error handling for not found see: cloudflare/agents#752

agents@0.3.4

Patch Changes

#768 cf8a1e7 Thanks @whoiskatrin! - pipe SQL errors into the existing onError method using a new SqlError class

#771 87dc96d Thanks @threepointone! - update dependencies

Updated dependencies [0e8fc1e, 87dc96d]:

@cloudflare/ai-chat@0.0.4

@cloudflare/codemode@0.0.4

agents@0.3.3

Patch Changes

a5d0137 Thanks @threepointone! - trigger a new release

Updated dependencies [a5d0137]:

@cloudflare/codemode@0.0.3

@cloudflare/ai-chat@0.0.3

agents@0.3.1

Patch Changes

#754 e21051d Thanks @threepointone! - fix: don't mark ai as optional under peerDependenciesMeta

agents@0.3.0

Minor Changes

accdd78 Thanks @threepointone! - update to ai sdk v6

via @whoiskatrin in cloudflare/agents#733

... (truncated)

Changelog

Sourced from agents's changelog.

0.3.7

agents@0.3.7 Release Notes

This release introduces Cloudflare Workflows integration for durable multi-step processing, secure email reply routing with HMAC-SHA256 signatures, 15+ new documentation files, and significant improvements to state management, the callable RPC system, and scheduling.

Highlights

Workflows Integration - Seamless integration between Cloudflare Agents and Cloudflare Workflows for durable, multi-step background processing

Secure Email Routing - HMAC-SHA256 signed email headers prevent unauthorized routing of emails to agent instances

Comprehensive Documentation - 15+ new docs covering getting started, state, routing, HTTP/WebSocket lifecycle, callable methods, MCP, and scheduling

Synchronous setState() - State updates are now synchronous with a new validateStateChange() validation hook

scheduleEvery() Method - Fixed-interval recurring tasks with overlap prevention

Callable System Improvements - Client-side RPC timeouts, streaming error signaling, introspection API

100+ New Tests - Comprehensive test coverage across state, routing, callable, and email utilities

Cloudflare Workflows Integration

Agents excel at real-time communication and state management. Workflows excel at durable execution. Together, they enable powerful patterns where Agents handle WebSocket connections while Workflows handle long-running tasks, retries, and human-in-the-loop flows.

AgentWorkflow Base Class

Extend AgentWorkflow instead of WorkflowEntrypoint to get typed access to the originating Agent:
import { AgentWorkflow } from "agents/workflows";
export class ProcessingWorkflow extends AgentWorkflow<MyAgent, TaskParams> {
async run(event: AgentWorkflowEvent<TaskParams>, step: AgentWorkflowStep) {
// Call Agent methods via RPC
await this.agent.updateStatus(params.taskId, "processing");
// Non-durable: progress reporting
await this.reportProgress({ step: &quot;process&quot;, percent: 0.5 });
this.broadcastToClients({ type: &quot;update&quot;, taskId: params.taskId });
// Durable via step: idempotent, won't repeat on retry
await step.mergeAgentState({ taskProgress: 0.5 });
await step.reportComplete(result);
return result;

}
}
Agent Methods for Workflows

runWorkflow(workflowName, params, options?) - Start workflow with optional metadata

... (truncated)

Commits

9647577 Version Packages (#802)
6218541 docs/tests/enhancements (#812)
4c46079 Move email utilities to agents/email (#828)
e20da53 Move workflow API to agents/workflows subpath (#827)
0c3c9bb Workflow Integration Enhancements (#825)
7c74336 update dependencies (#818)
c407331 Add providerOptions to generateObject in scheduling eval
ded8d3e docs: add OpenAI provider options documentation to scheduleSchema (#815)
7aebab3 update dependencies (#813)
f604008 feat(email): Add secure reply routing with HMAC signatures (#811)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for agents since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by cubic

Upgrade agents from 0.0.109 to 0.3.7 to gain Cloudflare Workflows integration, secure email reply routing, and improved state/callable APIs. This also updates transitive deps and raises some runtime/peer requirements.

Dependencies
- agents 0.3.7 (adds CLI, Workflows/email utilities, sync setState, scheduleEvery, RPC timeouts).
- Requires Node 20+ via cron-schedule 6.0.0.
- Brings MCP SDK 1.25.2 (nested), partysocket 1.1.11, partyserver 0.1.2.
- New/updated peers: ai ^6, react ^19 (optional), @cloudflare/ai-chat and codemode (optional).
Migration
- Ensure runtime Node 20+.
- Optional peers aren’t needed unless using React/UI features.
- If using email routing, configure HMAC signing keys.
- If you relied on async state updates, review the new synchronous setState behavior.
- Reinstall deps and run tests.

^{Written for commit 55d50c4. Summary will update on new commits.}

Bumps [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents) from 0.0.109 to 0.3.7. - [Release notes](https://github.com/cloudflare/agents/releases) - [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md) - [Commits](https://github.com/cloudflare/agents/commits/agents@0.3.7/packages/agents) --- updated-dependencies: - dependency-name: agents dependency-version: 0.3.7 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

cubic-dev-ai

No issues found across 3 files

sentry · 2026-02-03T18:47:06Z

package.json

    "@cloudflare/workers-oauth-provider": "^0.0.5",
    "@modelcontextprotocol/sdk": "1.17.1",
-    "agents": "^0.0.109",
+    "agents": "^0.3.7",


Bug: The agents@0.3.7 package requires ai@^6.0.0, but ai@4.3.19 is installed. This major version mismatch will cause runtime errors when agents code is executed.
_{Severity: CRITICAL}

Suggested Fix

To resolve the conflict, upgrade the ai package to a version compatible with the ^6.0.0 requirement specified by agents@0.3.7. Run pnpm add ai@latest to install a compatible version and update the lockfile.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not valid. Location: package.json#L15 Potential issue: The `agents@0.3.7` package declares a peer dependency on `ai: ^6.0.0`, but the project's lockfile resolves and installs `ai@4.3.19`. This major version mismatch (v6 vs. v4) will cause runtime errors. The application code directly uses `McpAgent` from the `agents` package, which was built against the AI SDK v6 APIs. When this code executes and calls functions that have changed or were introduced between v4 and v6 of the `ai` package, it will fail.

_{Did we get this right? 👍 / 👎 to inform future reviews.}

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 3, 2026

cubic-dev-ai bot reviewed Feb 3, 2026

View reviewed changes

sentry bot reviewed Feb 3, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump agents from 0.0.109 to 0.3.7#19

Bump agents from 0.0.109 to 0.3.7#19
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/agents-0.3.7

dependabot bot commented on behalf of github Feb 3, 2026 •

edited by cubic-dev-ai bot

Loading

Uh oh!

cubic-dev-ai bot left a comment

Uh oh!

sentry bot Feb 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 3, 2026 • edited by cubic-dev-ai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

agents@0.3.7 Release Notes

agents@0.3.6

Patch Changes

agents@0.3.5

Patch Changes

agents@0.3.4

Patch Changes

agents@0.3.3

Patch Changes

agents@0.3.1

Patch Changes

agents@0.3.0

Minor Changes

0.3.7

agents@0.3.7 Release Notes

Highlights

Cloudflare Workflows Integration

AgentWorkflow Base Class

Agent Methods for Workflows

Summary by cubic

Uh oh!

cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

Uh oh!

sentry bot Feb 3, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Feb 3, 2026 •

edited by cubic-dev-ai bot

Loading