Commit Graph

  • 7afca5daab refactor: remove cli/ from crewai package and relocate to proper modules gl/chore/refactor-cli Greyson Lalonde 2026-03-15 19:39:55 -04:00
  • fb2323b3de Code interpreter sandbox escape (#4791) Rip&Tear 2026-03-15 13:18:02 +08:00
  • 3771bdacd1 fix: merge main, resolve typing import conflict in azure completion alert-autofix-27 Rip&Tear 2026-03-15 11:08:40 +08:00
  • cf1636c300 fix(ci): exclude crewai_cli templates from ruff linting Greyson LaLonde 2026-03-14 22:38:48 -04:00
  • dfea5fb650 refactor: remove CLI shim from crewai package Greyson LaLonde 2026-03-14 22:24:34 -04:00
  • 8fd7a73423 fix(deploy): add pre-flight validation before deployment Greyson LaLonde 2026-03-14 22:21:02 -04:00
  • b7bd7aea50 Merge branch 'main' into gl/chore/refactor-cli Greyson LaLonde 2026-03-14 22:17:02 -04:00
  • 96fc584ab8 refactor: remove CLI from crewai package and add backward-compat shim Greyson LaLonde 2026-03-14 22:12:38 -04:00
  • 3732de7b88 test: add CLI tests to crewai-cli package Greyson LaLonde 2026-03-14 22:09:38 -04:00
  • 4f9a8f4112 refactor: move CLI source modules to crewai-cli package Greyson LaLonde 2026-03-14 22:08:48 -04:00
  • c0689aa6dc chore: scaffold crewai-cli package and update workspace config Greyson LaLonde 2026-03-14 22:04:37 -04:00
  • d5100a54c7 feat: add GuardrailProvider interface for pre-tool-call authorization (#4877) devin/1773511879-guardrail-provider-interface Devin AI 2026-03-14 18:18:37 +00:00
  • 3158e50a8e fix: prevent circular reference in signed envelope and remove unused variable devin/1773510175-mcp-security-integration Devin AI 2026-03-14 17:57:21 +00:00
  • 909ebd869b feat: add MCP security layer for message signing, tool integrity, and replay protection Devin AI 2026-03-14 17:47:51 +00:00
  • a74df9425a ci: trigger test re-run devin/1773465692-fix-xxe-vulnerability Devin AI 2026-03-14 05:32:52 +00:00
  • c768afd1a1 fix: correct tautological assertion in compact separators test devin/1773465726-fix-hardcoded-private-key-docstring Devin AI 2026-03-14 05:31:49 +00:00
  • ee55628db8 fix: resolve N817 lint error by using explicit imports from defusedxml Devin AI 2026-03-14 05:28:07 +00:00
  • 250b9f5815 fix: remove hardcoded private key placeholders from docstrings and add signing tests Devin AI 2026-03-14 05:27:33 +00:00
  • 506155b4f4 fix: replace xml.etree.ElementTree with defusedxml to prevent XXE attacks Devin AI 2026-03-14 05:24:39 +00:00
  • e1d7de0dba docs: update changelog and version for v1.10.2rc2 1.10.2rc2 Greyson LaLonde 2026-03-14 00:49:48 -04:00
  • 96b07bfc84 feat: bump versions to 1.10.2rc2 Greyson LaLonde 2026-03-14 00:34:12 -04:00
  • b8d7942675 fix: remove exclusive locks from read-only storage operations Greyson LaLonde 2026-03-14 00:21:14 -04:00
  • 88fd859c26 docs: update changelog and version for v1.10.2rc1 1.10.2rc1 Greyson LaLonde 2026-03-13 17:07:31 -04:00
  • 3413f2e671 feat: bump versions to 1.10.2rc1 Greyson LaLonde 2026-03-13 16:53:48 -04:00
  • 326ec15d54 feat(devtools): add release command and trigger PyPI publish Greyson LaLonde 2026-03-13 16:41:27 -04:00
  • c5a8fef118 fix: add cross-process and thread-safe locking to unprotected I/O (#4827) Greyson LaLonde 2026-03-13 15:28:11 -04:00
  • b7af26ff60 ci: add slack notification on successful pypi publish Greyson LaLonde 2026-03-13 12:05:52 -04:00
  • 48eb7c6937 fix: propagate contextvars across all thread and executor boundaries Greyson LaLonde 2026-03-13 00:32:22 -04:00
  • d8e38f2f0b fix: propagate ContextVars into async task threads danglies007 2026-03-12 21:33:58 +02:00
  • 00e963aeb3 fix: propagate contextvars.Context in execute_async() thread devin/1773296086-fix-async-context-propagation Devin AI 2026-03-12 06:18:25 +00:00
  • 542afe61a8 docs: update changelog and version for v1.10.2a1 Greyson LaLonde 2026-03-11 11:44:00 -04:00
  • 8a5b3bc237 feat: bump versions to 1.10.2a1 1.10.2a1 Greyson LaLonde 2026-03-11 11:30:11 -04:00
  • 534f0707ca fix: resolve LockException under concurrent multi-process execution Greyson LaLonde 2026-03-11 11:15:24 -04:00
  • 0046f9a96f fix(bedrock): group parallel tool results in single user message (#4775) Giulio Leone 2026-03-10 21:28:40 +01:00
  • 537186d4d5 fix: group bedrock tool results cursor/bedrock-test-discoverability-ce09 Cursor Agent 2026-03-10 18:11:50 +00:00
  • e72a80be6e Addressing MCP tools resolutions & eliminates all shared mutable connection (#4792) Lucas Gomide 2026-03-10 15:00:40 -03:00
  • 7cffcab84a ensure we support tool search - saving tokens and dynamically inject appropriate tools during execution - anthropic (#4779) Lorenze Jay 2026-03-10 10:48:13 -07:00
  • 2c78e60f56 chore: update tool specifications lorenze/feat/grep-tool github-actions[bot] 2026-03-10 17:32:23 +00:00
  • 8e336a476f Merge branch 'main' into lorenze/feat/grep-tool Lorenze Jay 2026-03-10 10:31:04 -07:00
  • f070ce8abd fix: update llm parameter handling in human_feedback function (#4801) João Moura 2026-03-10 10:27:09 -07:00
  • c2e6747176 fix: merge consecutive same-role messages for Anthropic Claude 4.6+ devin/1773150697-fix-consecutive-assistant-messages Devin AI 2026-03-10 13:58:36 +00:00
  • 959534d506 chore: update tool specifications devin/1773139454-fix-mcp-security-context-validation github-actions[bot] 2026-03-10 10:52:27 +00:00
  • 3148a75684 fix: ignore extra fields (security_context) in MCP tool schemas Devin AI 2026-03-10 10:49:51 +00:00
  • d9f6e2222f Introduce more Brave Search tools (#4446) Sampson 2026-03-09 23:38:54 -05:00
  • 5e08e03e43 memory improvements joaomdmoura/memory-overall-improvements Joao Moura 2026-03-09 20:11:39 -07:00
  • 80f6c17464 refactor(MCPNativeTool): remove unused shared loop thread and clean up code lorenze/fix/mcp-use-in-flows lorenzejay 2026-03-09 16:12:48 -07:00
  • 77ab203154 linted lorenzejay 2026-03-09 16:09:28 -07:00
  • fa3b1d5f64 implement dedicated background event loop for MCP operations lorenzejay 2026-03-09 14:50:36 -07:00
  • 0c10f13c90 [SECURITY] Fix F-001: Remove vulnerable sandbox fallback in CodeInterpreterTool cursor/crewai-security-check-1de0 Cursor Agent 2026-03-09 14:06:31 +00:00
  • f13272e3a1 fix: address review feedback for streaming handlers and test robustness devin/1773063536-fix-native-tool-calls-discarded Devin AI 2026-03-09 13:57:58 +00:00
  • 6d4fcbd7ee fix: prioritize tool calls over text when available_functions is None Devin AI 2026-03-09 13:45:12 +00:00
  • adef605410 fix: add missing list/dict methods to LockedListProxy and LockedDictProxy Lucas Gomide 2026-03-09 10:38:35 -03:00
  • 51dc1199a3 Add security audit report for crewaiinc/crewai Cursor Agent 2026-03-09 12:51:47 +00:00
  • 9ba1ec03a8 fix: hierarchical process delegation targets other agents instead of self devin/1773026345-fix-hierarchical-delegation Devin AI 2026-03-09 03:24:37 +00:00
  • e869cdc4e5 Merge branch 'main' into gl/refactor/narrow-any-types gl/refactor/narrow-any-types Greyson LaLonde 2026-03-08 23:08:30 -04:00
  • cd42bcf035 refactor(memory): convert memory classes to serializable Greyson LaLonde 2026-03-08 23:08:10 -04:00
  • 84deb5cc62 fix: make pickle context manager thread-safe Greyson LaLonde 2026-03-08 14:51:43 -04:00
  • 7d9faa7cbf fix: ensure callables are serialized properly Greyson LaLonde 2026-03-08 14:43:06 -04:00
  • e3ab996893 chore: add cassettes for flaky tests Greyson LaLonde 2026-03-08 14:38:20 -04:00
  • 62f3279bc5 fix: ensure cloudpickling is opt-in Greyson LaLonde 2026-03-08 14:24:37 -04:00
  • 9682e458d6 Merge branch 'gl/refactor/memory-basemodel' into gl/refactor/narrow-any-types Greyson Lalonde 2026-03-07 18:08:09 -05:00
  • 6df5421785 fix: handle re-validation in wrap validators and patch BaseModel class in tests Greyson Lalonde 2026-03-07 18:02:39 -05:00
  • f5116004db feat(types): use cloudpickle for callable serialization Greyson Lalonde 2026-03-07 17:48:59 -05:00
  • 31b8a0989a Merge branch 'gl/refactor/memory-basemodel' into gl/refactor/narrow-any-types Greyson Lalonde 2026-03-07 17:12:45 -05:00
  • 3e4226268c fix(test): update mock memory attribute from _read_only to read_only Greyson Lalonde 2026-03-07 17:08:29 -05:00
  • a10ef6e28d refactor: narrow Any-typed fields to concrete types across core models Greyson Lalonde 2026-03-07 16:52:55 -05:00
  • 3dc3f8bb52 Merge branch 'main' into gl/refactor/memory-basemodel Greyson LaLonde 2026-03-07 14:52:35 -05:00
  • 441e214a00 refactor(memory): convert Memory, MemoryScope, and MemorySlice to BaseModel Greyson Lalonde 2026-03-07 14:40:23 -05:00
  • bc45a7fbe3 feat: create action for nightly releases Greyson LaLonde 2026-03-06 18:32:52 -05:00
  • b125e572c4 fix(bedrock): group consecutive tool results into single user message devin/1772811723-fix-bedrock-tool-result-grouping Devin AI 2026-03-06 15:47:36 +00:00
  • 9900a79546 fix: Bedrock tool calls extract empty arguments - uses wrong field name devin/1772811502-fix-bedrock-tool-args Devin AI 2026-03-06 15:44:10 +00:00
  • c1ae3da1cd fix: address review feedback - integer key coercion and in-memory cache serializers devin/1772809995-fix-insecure-pickle-deserialization Devin AI 2026-03-06 15:26:38 +00:00
  • 614354df4c fix: replace insecure pickle deserialization with JSON serialization Devin AI 2026-03-06 15:19:49 +00:00
  • 9892e2fd16 chore(deps-dev): bump ruff from 0.14.7 to 0.15.1 dependabot/uv/ruff-0.15.1 dependabot[bot] 2026-03-05 18:42:56 +00:00
  • 87759cdb14 fix(deps): bump gitpython to >=3.1.41 to resolve CVE path traversal vulnerability (#4740) Matt Aitchison 2026-03-05 12:41:24 -06:00
  • 11be698953 fix: use LF line endings in generate_tool_specs save_to_json devin/1772729412-fix-crlf-tool-specs Devin AI 2026-03-05 16:54:04 +00:00
  • 059cb93aeb fix(executor): propagate contextvars context to parallel tool call threads Tiago Freire 2026-03-05 08:20:09 -05:00
  • cebc52694e docs: update changelog and version for v1.10.1 Lorenze Jay 2026-03-04 15:20:02 -08:00
  • 53df41989a feat: bump versions to 1.10.1 (#4706) 1.10.1 Lorenze Jay 2026-03-04 11:03:17 -08:00
  • ea70976a5d fix: adjust executor listener value to avoid recursion (#4705) Greyson LaLonde 2026-03-04 13:47:22 -05:00
  • 3cc6516ae5 Memory overall improvements (#4688) João Moura 2026-03-04 09:19:07 -08:00
  • 88ad3a3ac4 refactor: simplify category handling in RecallFlow Joao Moura 2026-03-04 09:06:54 -08:00
  • a3ea6d280a refactor: remove inferred_categories from RecallState and update category merging logic Joao Moura 2026-03-03 07:53:51 -08:00
  • 9d09a173e6 feat: increase memory recall limit and enhance memory context documentation Joao Moura 2026-03-02 22:59:01 -08:00
  • c06aa4d476 feat: enhance memory recall limits and update documentation Joao Moura 2026-03-02 17:18:47 -08:00
  • b66a768ad6 test: avoid MagicMock class name mutation in telemetry tests devin/1772642874-fix-telemetry-custom-memory Devin AI 2026-03-04 16:58:48 +00:00
  • ec8df54e57 fix: serialize Memory objects for telemetry span attributes (#4703) Devin AI 2026-03-04 16:52:02 +00:00
  • d0da1149f0 feat(bedrock): add support for Anthropic Claude V4 models devin/1772635340-bedrock-anthropic-v4-support Devin AI 2026-03-04 14:48:43 +00:00
  • 4747a8263a fix: streaming handler returns tool_calls when available_functions is None devin/1772627303-fix-tools-discarded-with-output-pydantic Devin AI 2026-03-04 12:54:33 +00:00
  • 992321f679 fix: also skip response_model passthrough to litellm when tools are present Devin AI 2026-03-04 12:48:53 +00:00
  • c5d438402f fix: use self.tools instead of self.original_tools for no-tools routing devin/1772626609-fix-output-pydantic-no-function-calling Devin AI 2026-03-04 12:37:50 +00:00
  • 10384152d3 fix: prevent tools from being discarded when response_model is set (#4697) Devin AI 2026-03-04 12:36:59 +00:00
  • 7e60321945 fix: address review comments - unused import, FC+no-tools routing Devin AI 2026-03-04 12:32:30 +00:00
  • 20be4ae62b fix: prevent response_model from being passed in ReAct flow when LLM lacks function calling Devin AI 2026-03-04 12:24:12 +00:00
  • 9bdc7b9eef fix: address review comments - add is_litellm guard, remove unused import/var devin/1772625832-fix-remote-ollama-url Devin AI 2026-03-04 12:21:57 +00:00
  • 9dabb3e81c fix: support remote Ollama server for function calling and pydantic output Devin AI 2026-03-04 12:15:16 +00:00
  • ad82e52d39 fix(gemini): group parallel function_response parts in a single Content object (#4693) nicoferdi96 2026-03-04 12:04:23 +01:00
  • 555d390ad6 chore(deps-dev): bump types-regex dependabot/uv/types-regex-2026.1.15.20260116 dependabot[bot] 2026-03-04 06:15:01 +00:00
  • 9336702ebc fix(deps): bump pypdf, urllib3 override, and dev dependencies for security fixes Matt Aitchison 2026-03-04 00:13:38 -06:00
  • 030f6d6c43 fix: use anon id for ephemeral traces Greyson LaLonde 2026-03-04 00:45:09 -05:00