Joao Moura dd0f536616 fix(deps): stop capping chromadb at 1.1.x so the CVE-2026-45829 patch can land ...

CVE-2026-45829 (pre-auth code injection in the ChromaDB server) has no
patched release yet — every 1.x up to 1.5.9 is in the vulnerable range.
The compatible-release pin ~=1.1.0 would silently block the 1.6+ patch
the moment it ships, forcing users to wait for a crewai release to
remediate a CRITICAL.

Relax the requirement to >=1.1.0,<2.0.0 and lock to the current top of
the range (1.5.9), validated against the rag/memory/knowledge suites.
Adds a regression test asserting the specifier keeps the 1.x line open.

Linear: OSS-90

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-13 20:58:27 -07:00

..

a2a

chore(crewai): drop self-explanatory comments

2026-05-26 10:23:33 -07:00

agents

fix(agent): report per-call usage metrics on kickoff results (#6506)

2026-07-10 14:17:45 -07:00

cassettes

Lorenze/feat/conversational flows (#5896)

2026-06-03 11:53:16 -07:00

cli

fix(cli): unify crewai run flow input resolution and prompt from the state schema (#6466)

2026-07-07 22:17:09 -03:00

config

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

crew

feat: async crew support

2025-12-04 16:53:19 -05:00

events

fix(events): scope runtime state per run to bound growth and isolate concurrent runs

2026-06-10 18:39:05 -07:00

experimental

Fix symlink path traversal in skill archive extraction (#6235)

2026-06-24 08:50:41 -07:00

hooks

Add typed output schemas for CrewAI tools (#6236)

2026-06-19 14:33:51 -07:00

knowledge

JSON first crews (#6131)

2026-06-14 04:19:48 -03:00

llms

improving custom OpenAI urls (#6490)

2026-07-09 15:30:16 -07:00

mcp

feat: enhance StdioTransport to prevent environment variable leakage (#5506)

2026-05-27 13:38:25 -07:00

memory

JSON crew fixes (#6217)

2026-06-18 14:14:54 -03:00

pipeline

chore: restructure test env, cassettes, and conftest; fix flaky tests

2025-11-29 16:55:24 -05:00

project

Add repository agents to flow definitions (#6437)

2026-07-02 14:28:01 -07:00

rag

JSON first crews (#6131)

2026-06-14 04:19:48 -03:00

security

fix(deps): stop capping chromadb at 1.1.x so the CVE-2026-45829 patch can land

2026-07-13 20:58:27 -07:00

skills

Support inline skill definitions (#6396)

2026-06-30 11:22:05 -07:00

storage

New Unified Memory System (#4420)

2026-02-13 21:34:37 -03:00

task

fix(task): use acall for output conversion in async paths

2026-05-04 18:42:12 +08:00

telemetry

ensure we are writing version for flows (#6467)

2026-07-06 18:47:27 -07:00

tools

fix(tools): stop rewriting the authored tool description at construction (#6508)

2026-07-10 20:33:57 -03:00

tracing

Lorenze/feat/conversational flows (#5896)

2026-06-03 11:53:16 -07:00

utilities

feat(cli): run declarative flows on the TUI (headless terminal fallback) (#6484)

2026-07-10 11:42:12 -03:00

__init__.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_agent_multimodal.py

Lorenze/feat/plan execute pattern (#4817)

2026-03-15 18:33:17 -07:00

test_async_human_feedback.py

JSON first crews (#6131)

2026-06-14 04:19:48 -03:00

test_callback.py

chore(crewai): drop self-explanatory comments

2026-05-26 10:23:33 -07:00

test_checkpoint_cli.py

refactor: extract CLI into standalone crewai-cli package

2026-05-06 20:46:46 +08:00

test_checkpoint.py

Validate flow CEL expressions at definition load time (#6224)

2026-06-18 12:18:22 -07:00

test_context.py

Lorenze/imp/native tool calling (#4258)

2026-01-22 17:44:03 -08:00

test_crew_multimodal.py

Fix structured output leaks in tool-calling loops (#5897)

2026-05-27 13:20:53 -07:00

test_crew_thread_safety.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_crew.py

fix(tools)!: make tool-result caching opt-in instead of on by default (#6509)

2026-07-10 17:37:36 -07:00

test_custom_llm.py

chore(crewai): drop self-explanatory comments

2026-05-26 10:23:33 -07:00

test_event_record.py

feat(events): add reset_runtime_state to release accumulated bus state

2026-06-10 16:12:28 -07:00

test_flow_ask.py

chore(crewai): drop self-explanatory comments

2026-05-26 10:23:33 -07:00

test_flow_conversation.py

fix(flow): don't double-append the turn reply when a handler trims history (#6510)

2026-07-10 20:01:07 -07:00

test_flow_default_override.py

chore(crewai): drop self-explanatory comments

2026-05-26 10:23:33 -07:00

test_flow_definition.py

Remove redundant CEL text helper (#6528)

2026-07-13 14:29:36 -04:00

test_flow_from_definition.py

Remove redundant CEL text helper (#6528)

2026-07-13 14:29:36 -04:00

test_flow_human_input_integration.py

Implement message setup and feedback handling in AgentExecutor (#6465)

2026-07-06 15:28:37 -07:00

test_flow_multimodal.py

feat: native multimodal file handling; openai responses api

2026-01-23 15:13:25 -05:00

test_flow_persistence_factory.py

feat(storage): pluggable default backends for memory, knowledge, rag, flow (#6079)

2026-06-08 21:14:13 -05:00

test_flow_persistence.py

Remove StateProxy from flow state access (#6327)

2026-06-24 16:37:51 -07:00

test_flow_resumability_regression.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_flow_usage_metrics.py

fix: aggregate token usage across all LLM calls (#6122)

2026-06-12 12:55:22 -04:00

test_flow_visualization.py

Require explicit CrewAI project definitions (#6358)

2026-06-26 12:07:03 -07:00

test_flow.py

Drain memory writes before kickoff and flow completion events (#6497)

2026-07-09 15:01:14 -04:00

test_guardrail_serialization.py

fix: serialize guardrail callables as null for JSON checkpointing

2026-04-28 14:57:49 +08:00

test_hallucination_guardrail.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_human_feedback_decorator.py

JSON first crews (#6131)

2026-06-14 04:19:48 -03:00

test_human_feedback_integration.py

JSON first crews (#6131)

2026-06-14 04:19:48 -03:00

test_imports.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_llm_streaming_finish_reason.py

feat(otel): surface real finish_reason + sampling params + response.id on LLM events (#5945)

2026-06-05 07:23:38 -04:00

test_llm.py

JSON first crews (#6131)

2026-06-14 04:19:48 -03:00

test_markdown_task.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_multimodal_validation.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_project.py

chore(crewai): drop self-explanatory comments

2026-05-26 10:23:33 -07:00

test_stream_frames.py

Define stream frame protocol for flows (#6391)

2026-06-30 10:53:48 -07:00

test_streaming_integration.py

Define stream frame protocol for flows (#6391)

2026-06-30 10:53:48 -07:00

test_streaming.py

Define stream frame protocol for flows (#6391)

2026-06-30 10:53:48 -07:00

test_task_guardrails.py

chore(crewai): drop self-explanatory comments

2026-05-26 10:23:33 -07:00

test_task.py

chore(crewai): drop self-explanatory comments

2026-05-26 10:23:33 -07:00

test_tool_cache_default.py

fix(tools)!: make tool-result caching opt-in instead of on by default (#6509)

2026-07-10 17:37:36 -07:00

test_usage_shape_parity.py

fix(output): expose token usage under both names on agent and crew results (#6507)

2026-07-10 20:29:34 -03:00

utils.py

fix: add GPT-5 and o-series to multimodal vision prefixes (#5183)

2026-04-01 18:08:37 -03:00