The latest releases changed how agents handle tools, data, sessions, approvals, and handoffs. We traced each change to the official source. Start with five recent changes before your next build.
One task moves through memory, tools, approval, artifacts, and handoff. The blue route marks every place the work can wait, change, or pass to someone else. AI-assisted editorial illustration.
In this editionA live index of what you can read today.
656
sourced records
301
systems and frameworks
157
terms and concepts
2
records held for more proof
The week in the field
Which five changes should you check before your next build?
These releases changed runtime context, data handling, approvals, sessions, or handoffs. Each note starts with the official release. Find the change closest to your work, then read the source before you ship. That is the quickest way to see whether it changes your limits, tests, or review plan.
01
Security-relevant release
A good trace shows the route, every checkpoint, and the place a person stopped the work. AI-assisted editorial illustration.
Deep Agents separates private subagent state
LangChain QuickJS 0.3.7 keeps private state out of subagent propagation while adding native streaming for programmatic tool calls. The preceding 0.3.6 release added an HMAC check for serialized QuickJS snapshots; neither change makes arbitrary generated code safe outside the runtime's other isolation and policy controls.
A file boundary has to hold from the first check to the place where the session writes. AI-assisted editorial illustration.
Pydantic AI makes realtime interruption state explicit
Pydantic AI 2.40 adds barge-in handling, caller-reported played-audio byte counts, out-of-band prompts, and agent event listeners. Accurate rollback depends on the driver reporting how much buffered audio actually played; the API cannot infer external playback by itself.
The valid path continues. The rejected action waits where someone can inspect it. AI-assisted editorial illustration.
CrewAI closes its internal model-hook gap
CrewAI 1.15.19 runs model-call hooks on every execution path and propagates deny decisions, superseding the 1.15.18 limitation for CrewAI-internal flows. The same release bumps named document-processing dependencies for security vulnerabilities, but its notes do not identify CVEs for those two bumps.
A skill can be picked and reused like a tool. Someone still has to own its permissions and release. AI-assisted editorial illustration.
Agno negotiates stateless MCP explicitly
Agno 3.0.6 can serve MCP without session tracking and lets clients choose legacy, automatic, or current protocol behavior. Stateless mode stays off by default and gives up server-initiated notifications and resumable SSE, so horizontal routing improves only by accepting those feature losses.
The tool call crosses a confirmation gate before it can touch the artifact. AI-assisted editorial illustration.
Mastra restores context to durable approval checks
Mastra core 1.64 passes request context and workspace data into per-tool approval functions on durable and networked agents, including after cross-process resume. The release also validates reconstructed MCP structured output and warns when authenticated servers trust client-supplied resource identifiers without a user-to-resource mapping.
Start with the question in front of you. Need a definition? Open the glossary. Choosing a framework? Compare systems. Checking who built what? Use the ecosystem. Looking for a rule? Read the standards. One clear question is enough to begin.
They give you the agent, its workflow, its limits, its tool protocol, and the evaluation that helps you judge the result. Read them in order and the rest of the field becomes easier to follow. Together, they give you a working frame for every system, standard, and release note that follows.
Start with any term, system, organization, or standard. The map shows the records sitting closest to it, then lets you open each source for yourself. Use those connections to choose what to read next. A line suggests a path; it does not prove that the two things belong together.