langgraph-agent-toolkit 0.10.1__tar.gz → 0.10.2__tar.gz

langgraph_agent_toolkit-0.10.2/.dockerignore

@@ -0,0 +1,28 @@
+# Only dependency manifests and application source enter the build context.
+# Docker sends the selected Dockerfile and this ignore file separately.
+**
+!pyproject.toml
+!uv.lock
+!langgraph_agent_toolkit/
+!langgraph_agent_toolkit/**
+
+# Keep local secrets and generated files out of the application source copy.
+**/.env
+**/.env.*
+**/*.env
+**/*.env.*
+**/.git
+**/.venv
+**/__pycache__
+**/*.py[cod]
+**/.pytest_cache
+**/.ruff_cache
+**/.mypy_cache
+**/.DS_Store
+**/*.log
+**/*.db
+**/*.sqlite
+**/*.sqlite3
+**/*-journal
+**/*-wal
+**/*-shm

{langgraph_agent_toolkit-0.10.1 → langgraph_agent_toolkit-0.10.2}/.env.example

@@ -35,12 +35,26 @@ OBSERVABILITY_SHUTDOWN_TIMEOUT=10
 # Optional current SDK URL alias. It takes precedence over LANGFUSE_HOST.
 # LANGFUSE_BASE_URL=http://langfuse-web:3000
 
+# Compose server image selection. Existing v3 volumes need the migration guide.
+LANGFUSE_SERVER_VERSION=4.71.0
+# API image SDK generation. Use 4 or 3 with an existing Langfuse v3 server.
+LANGFUSE_SDK_MAJOR=5
+
 # LangSmith configuration
 # LANGSMITH_TRACING=true
 # LANGSMITH_API_KEY=
 # LANGSMITH_PROJECT=default
 # LANGSMITH_ENDPOINT=https://api.smith.langchain.com
 
+# Phoenix configuration. Install the `phoenix` extra and select `phoenix` above.
+# Use the base HTTP API URL. The adapter adds `/v1/traces` for OTLP export.
+# PHOENIX_ENDPOINT=http://localhost:6006
+# PHOENIX_PROJECT_NAME=langgraph-agent-toolkit
+# PHOENIX_API_KEY=
+# PHOENIX_TIMEOUT=5
+# Native OpenTelemetry export interval in milliseconds. Phoenix defaults to 1 second.
+# OTEL_BSP_SCHEDULE_DELAY=1000
+
 # Select a memory backend.
 # `postgres` requires the PostgreSQL variables.
 # `sqlite` accepts an optional `SQLITE_DB_PATH` value.
@@ -194,6 +208,13 @@ MCP_SERVERS={}
 MCP_AGENT_SERVERS={}
 # Bound total tool discovery time during worker startup, in seconds.
 MCP_DISCOVERY_TIMEOUT=30
+
+# Optional native and Deep Agents tool selection. Keep disabled for small catalogs.
+TOOL_SELECTION={"mode":"off"}
+# TOOL_SELECTION={"mode":"llm","max_tools":8,"model_config_key":"selector"}
+# Configure `selector` in MODEL_CONFIGS. Omit the key to use the main model.
+# Provider search needs a compatible model and API route. See docs/tool_selection.rst.
+# TOOL_SELECTION={"mode":"provider","always_include":["add"]}
 # Example: read the full Authorization header from DOCUMENTS_MCP_AUTH.
 # MCP_SERVERS={"docs":{"url":"https://mcp.example.com/mcp","headers_env":{"Authorization":"DOCUMENTS_MCP_AUTH"},"timeout":30,"tool_allowlist":["search"]}}
 # MCP_AGENT_SERVERS={"create-agent":["docs"],"react-agent":["docs"]}

{langgraph_agent_toolkit-0.10.1 → langgraph_agent_toolkit-0.10.2}/.github/dependabot.yml

@@ -31,6 +31,8 @@ updates:
       timezone: "Europe/Kyiv"
     cooldown:
       default-days: 7
+      exclude:
+        - "certifi"
     groups:
       # Keep security fixes separate from routine updates.
       python-security:
@@ -58,6 +60,8 @@ updates:
         patterns:
           - "langfuse"
           - "langsmith"
+          - "arize-phoenix*"
+          - "openinference*"
           - "opentelemetry*"
         update-types:
           - "minor"

langgraph_agent_toolkit-0.10.2/.github/workflows/langfuse-disposable.yml

@@ -0,0 +1,87 @@
+name: Langfuse disposable E2E
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: langfuse-disposable-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  test-server:
+    name: Server ${{ matrix.server }} with SDK ${{ matrix.sdk }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    strategy:
+      fail-fast: false
+      max-parallel: 2
+      matrix:
+        include:
+          - server: "4.71.0"
+            sdk: "5.0.4"
+            extra: langfuse-v5
+          - server: "4.71.0"
+            sdk: "4.18.0"
+            extra: langfuse-v4
+          - server: "3.225.15"
+            sdk: "4.18.0"
+            extra: langfuse-v4
+          - server: "3.225.15"
+            sdk: "3.15.0"
+            extra: langfuse-v3
+          - server: "3.225.15"
+            sdk: "2.60.10"
+            extra: langfuse-v2
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.13"
+      - uses: astral-sh/setup-uv@v10.1.0
+        with:
+          version: "0.13.6"
+      - name: Install the locked SDK and service dependencies
+        run: >-
+          uv sync --frozen --no-install-project --no-default-groups --extra all
+          --extra '${{ matrix.extra }}' --group tests
+      - name: Generate a disposable project
+        env:
+          EXPECTED_LANGFUSE_VERSION: ${{ matrix.sdk }}
+        run: |
+          uv run --no-sync python - <<'PY'
+          import os
+          from importlib.metadata import version
+          assert version("langfuse") == os.environ["EXPECTED_LANGFUSE_VERSION"]
+          PY
+          uv run --no-sync python scripts/ci/langfuse_stack.py prepare \
+            --directory=data/langfuse-ci --server_version='${{ matrix.server }}'
+      - name: Start the isolated server and wait for health checks
+        run: >-
+          uv run --no-sync python scripts/ci/langfuse_stack.py start
+          --directory=data/langfuse-ci
+      - name: Verify stored SDK and API process records
+        run: |
+          set -a
+          source data/langfuse-ci/server.env
+          set +a
+          uv run --no-sync pytest tests/integration/test_langfuse_live.py \
+            tests/e2e/test_langfuse_api.py --run-e2e --run-langfuse \
+            --junitxml=data/langfuse-ci/results.xml -q
+      - name: Collect logs and remove only this test stack
+        if: always()
+        run: >-
+          uv run --no-sync python scripts/ci/langfuse_stack.py stop
+          --directory=data/langfuse-ci
+      - name: Save the test report
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: langfuse-${{ matrix.server }}-sdk-${{ matrix.sdk }}
+          path: data/langfuse-ci/results.xml
+          if-no-files-found: warn
+          retention-days: 14

{langgraph_agent_toolkit-0.10.1 → langgraph_agent_toolkit-0.10.2}/.github/workflows/langfuse-live.yml

@@ -30,11 +30,14 @@ jobs:
             sdk: "3.15.0"
             extra: langfuse-v3
           - server: 3
-            sdk: "4.15.2"
+            sdk: "4.18.0"
             extra: langfuse-v4
           - server: 4
-            sdk: "4.15.2"
+            sdk: "4.18.0"
             extra: langfuse-v4
+          - server: 4
+            sdk: "5.0.4"
+            extra: langfuse-v5
     steps:
       - uses: actions/checkout@v7
         with:
@@ -44,7 +47,7 @@ jobs:
           python-version: "3.12"
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
       - name: Install the selected SDK and test dependencies
         run: |
           uv venv .venv-live
@@ -63,3 +66,15 @@ jobs:
           LAT_TEST_LANGFUSE_PUBLIC_KEY: ${{ secrets.LANGFUSE_TEST_PUBLIC_KEY }}
           LAT_TEST_LANGFUSE_SECRET_KEY: ${{ secrets.LANGFUSE_TEST_SECRET_KEY }}
           LAT_TEST_LANGFUSE_TIMEOUT: "180"
+
+      - name: Verify API worker shutdown and restart
+        if: matrix.server != 2
+        run: >-
+          uv run --no-project --python .venv-live/bin/python python -m pytest
+          tests/e2e/test_langfuse_api.py --run-e2e --run-langfuse -q
+        env:
+          LAT_TEST_LANGFUSE_BASE_URL: ${{ vars.LANGFUSE_TEST_URL }}
+          LAT_TEST_LANGFUSE_SERVER_VERSION: ${{ vars.LANGFUSE_TEST_VERSION }}
+          LAT_TEST_LANGFUSE_PUBLIC_KEY: ${{ secrets.LANGFUSE_TEST_PUBLIC_KEY }}
+          LAT_TEST_LANGFUSE_SECRET_KEY: ${{ secrets.LANGFUSE_TEST_SECRET_KEY }}
+          LAT_TEST_LANGFUSE_TIMEOUT: "180"

langgraph_agent_toolkit-0.10.2/.github/workflows/phoenix-e2e.yml

@@ -0,0 +1,86 @@
+name: Phoenix E2E
+
+on:
+  pull_request:
+    paths:
+      - "langgraph_agent_toolkit/core/observability/**"
+      - "langgraph_agent_toolkit/core/_base_settings.py"
+      - "langgraph_agent_toolkit/agents/agent_executor.py"
+      - "langgraph_agent_toolkit/service/**"
+      - "tests/conftest.py"
+      - "tests/e2e/*phoenix*"
+      - "tests/e2e/api_process.py"
+      - "tests/integration/*phoenix*"
+      - "scripts/ci/phoenix_stack.py"
+      - "pyproject.toml"
+      - "uv.lock"
+      - ".github/workflows/phoenix-e2e.yml"
+  push:
+    branches: ["main"]
+    paths:
+      - "langgraph_agent_toolkit/core/observability/**"
+      - "tests/e2e/*phoenix*"
+      - "tests/integration/*phoenix*"
+      - "scripts/ci/phoenix_stack.py"
+      - "pyproject.toml"
+      - "uv.lock"
+      - ".github/workflows/phoenix-e2e.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: phoenix-e2e-${{ github.event_name }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  test-server:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.13"
+      - uses: astral-sh/setup-uv@v10.1.0
+        with:
+          version: "0.13.6"
+      - name: Install the locked service and Phoenix dependencies
+        run: >-
+          uv sync --frozen --no-install-project --no-default-groups --extra all
+          --group tests
+      - name: Generate and start a disposable Phoenix server
+        run: |
+          uv run --no-sync python scripts/ci/phoenix_stack.py prepare \
+            --directory=data/phoenix-ci --server_version=20.26.1
+          uv run --no-sync python scripts/ci/phoenix_stack.py start \
+            --directory=data/phoenix-ci
+      - name: Verify stored traces, prompts, feedback, and restarts
+        run: |
+          set -a
+          source data/phoenix-ci/server.env
+          set +a
+          uv run --no-sync pytest tests/integration/test_phoenix_live.py \
+            tests/e2e/test_phoenix_api.py --run-e2e --run-phoenix \
+            --no-cov --basetemp=data/phoenix-ci/process-tests \
+            --junitxml=data/phoenix-ci/results.xml -q
+      - name: Collect logs and remove only this test stack
+        if: always()
+        run: >-
+          uv run --no-sync python scripts/ci/phoenix_stack.py stop
+          --directory=data/phoenix-ci
+      - name: Save the test report
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: phoenix-server-20.26.1
+          path: |
+            data/phoenix-ci/results.xml
+            data/phoenix-ci/process-tests/**/api.log
+            data/phoenix-ci/process-tests/**/phoenix-records.json
+            data/phoenix-ci/services.log
+          if-no-files-found: warn
+          retention-days: 14

{langgraph_agent_toolkit-0.10.1 → langgraph_agent_toolkit-0.10.2}/.github/workflows/release.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
           enable-cache: false
 
       - name: Set up Python

{langgraph_agent_toolkit-0.10.1 → langgraph_agent_toolkit-0.10.2}/.github/workflows/sphinx.yml

@@ -39,7 +39,7 @@ jobs:
           python-version: "3.11"
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
       - name: Install locked documentation and runtime dependencies
         run:
           uv sync --frozen --no-install-project --no-default-groups --extra all

{langgraph_agent_toolkit-0.10.1 → langgraph_agent_toolkit-0.10.2}/.github/workflows/test.yml

@@ -54,7 +54,7 @@ jobs:
           python-version: "3.13"
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
       - name: Install the configured hook runner
         run: uv sync --frozen --only-group lint
       - name: Stage the pull request changes in this disposable checkout
@@ -91,7 +91,7 @@ jobs:
           python-version: "3.13"
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
       - name: Verify the dependency lockfile
         run: uv lock --check
       - name: Install lint dependencies
@@ -117,7 +117,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
       - name: Build and install the base wheel in a clean environment
         run: |
           uv build --wheel
@@ -142,6 +142,15 @@ jobs:
             --python "$GITHUB_WORKSPACE/.venv-wheel/bin/python" python \
             "$GITHUB_WORKSPACE/scripts/ci/verify_ui_imports.py"
 
+      - name: Verify the source UI without service dependencies
+        run: |
+          uv sync --frozen --only-group client --python "${{ matrix.python-version }}"
+          uv run --no-sync python scripts/ci/verify_ui_imports.py
+        env:
+          UV_PROJECT_ENVIRONMENT: .venv-client
+          PYTHONPATH: ${{ github.workspace }}
+          PYTHON_DOTENV_DISABLED: "1"
+
   test-python:
     runs-on: ubuntu-latest
     timeout-minutes: 20
@@ -162,13 +171,15 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
       - name: Install dependencies with uv
         run:
           uv sync --frozen --no-install-project --no-default-groups --extra all
           --group tests
 
       - name: Test the package and API process journeys with coverage
+        env:
+          LAT_TEST_TOOL_SELECTION_REPORT_DIR: data/tool-selection-ci/reports
         run: >-
           uv run --no-sync pytest --run-e2e --cov --cov-report=xml
           --junitxml=test-results.xml
@@ -181,6 +192,7 @@ jobs:
           path: |
             coverage.xml
             test-results.xml
+            data/tool-selection-ci/reports/*.json
           retention-days: 14
           if-no-files-found: warn
 
@@ -214,7 +226,9 @@ jobs:
           - extra: langfuse-v3
             version: "3.15.0"
           - extra: langfuse-v4
-            version: "4.15.2"
+            version: "4.18.0"
+          - extra: langfuse-v5
+            version: "5.0.4"
     steps:
       - uses: actions/checkout@v7
         with:
@@ -224,7 +238,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
       - name: Verify the extra selects its SDK major
         run: |
           uv venv .venv-langfuse
@@ -276,15 +290,17 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
       - name: Install test dependencies
-        run:
+        run: >-
           uv sync --frozen --no-install-project --no-default-groups --group
-          tests
-      - name: Verify locking, restart, cancellation, and checkpoint migration
+          tests --extra deepagents
+      - name: Verify locking, restart, cancellation, checkpoints, and media
         run: >-
           uv run --no-sync pytest tests/integration/test_postgres_reliability.py
           tests/integration/test_postgres_migration.py
+          tests/integration/test_deepagents_postgres.py
+          tests/integration/test_postgres_checkpoint_prune.py
           tests/core/test_concurrency.py tests/core/test_deadlocks.py
           --run-postgres -q
         env:
@@ -315,6 +331,13 @@ jobs:
           cache-from: type=gha,scope=api
           cache-to: type=gha,scope=api,mode=max,ignore-error=true,timeout=2m
 
+      - name: Verify service runtime contents
+        run: |
+          docker run --rm --network none \
+            --mount "type=bind,source=$PWD/tests/integration/docker_image_smoke.py,target=/tmp/docker_image_smoke.py,readonly" \
+            agent-service-toolkit.service:${{ github.sha }} \
+            python /tmp/docker_image_smoke.py api
+
       - name: Verify both model transports in the service image
         run: |
           docker run --rm --network none \
@@ -333,6 +356,33 @@ jobs:
           cache-from: type=gha,scope=app
           cache-to: type=gha,scope=app,mode=max,ignore-error=true,timeout=2m
 
+      - name: Verify app runtime contents and client-only imports
+        run: |
+          docker run --rm --network none \
+            --mount "type=bind,source=$PWD/tests/integration/docker_image_smoke.py,target=/tmp/docker_image_smoke.py,readonly" \
+            --mount "type=bind,source=$PWD/scripts/ci/verify_ui_imports.py,target=/tmp/verify_ui_imports.py,readonly" \
+            agent-service-toolkit.app:${{ github.sha }} \
+            python /tmp/docker_image_smoke.py app
+
+      - name: Record image sizes and layers
+        run: |
+          {
+            echo "### Docker image sizes"
+            echo
+            echo "These are uncompressed local image sizes, not registry transfer sizes."
+            echo
+            echo '| Image | Platform | Size (bytes) |'
+            echo '| --- | --- | ---: |'
+            for image in agent-service-toolkit.service:${{ github.sha }} agent-service-toolkit.app:${{ github.sha }}; do
+              docker image inspect --format '| {{index .RepoTags 0}} | {{.Os}}/{{.Architecture}} | {{.Size}} |' "$image"
+            done
+          } >> "$GITHUB_STEP_SUMMARY"
+          for image in agent-service-toolkit.service:${{ github.sha }} agent-service-toolkit.app:${{ github.sha }}; do
+            echo "::group::Layers for $image"
+            docker history --no-trunc "$image"
+            echo "::endgroup::"
+          done
+
       - name: Start service container
         run:
           docker run -d --name service-container --network host -e
@@ -342,33 +392,33 @@ jobs:
 
       - name: Confirm service starts correctly
         run: |
-          timeout 30 bash -c '
-            while ! curl -fsS http://127.0.0.1:8080/health/ready; do
-              echo "Waiting for service to be ready..."
+          timeout 90 bash <<'BASH'
+            while [ "$(docker inspect --format "{{.State.Health.Status}}" service-container)" != "healthy" ]; do
+              echo "Waiting for the service health check..."
               docker logs service-container
               sleep 2
             done
-          '
+          BASH
 
       - name: Run app container
         run:
-          docker run -d --name app-container --network host -e
-          AGENT_URL=http://127.0.0.1:8080 -e AUTH_SECRET=ci-test-token --mount
-          "type=bind,source=$PWD/scripts/ci/verify_ui_imports.py,target=/tmp/verify_ui_imports.py,readonly"
+          docker run -d --name app-container --network host --mount
+          "type=bind,source=$PWD/tests/integration/docker_ui_smoke.py,target=/tmp/docker_ui_smoke.py,readonly"
+          -e AGENT_URL=http://127.0.0.1:8080 -e AUTH_SECRET=ci-test-token
           agent-service-toolkit.app:${{ github.sha }}
 
       - name: Confirm app starts correctly
         run: |
-          timeout 30 bash -c '
-            while ! curl -fsS http://localhost:8501/_stcore/health; do
-              echo "Waiting for app to be ready..."
+          timeout 90 bash <<'BASH'
+            while [ "$(docker inspect --format "{{.State.Health.Status}}" app-container)" != "healthy" ]; do
+              echo "Waiting for the app health check..."
               docker logs app-container
               sleep 2
             done
-          '
+          BASH
 
-      - name: Verify imports in the client-only image
-        run: docker exec app-container python /tmp/verify_ui_imports.py
+      - name: Verify chat and history from the app container
+        run: docker exec app-container python /tmp/docker_ui_smoke.py
 
       - name: Set up Python
         uses: actions/setup-python@v7
@@ -377,7 +427,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v10.1.0
         with:
-          version: "0.12.1"
+          version: "0.13.6"
       - name: Install ONLY CLIENT dependencies with uv
         run: |
           uv sync --frozen --only-group client --only-group tests

{langgraph_agent_toolkit-0.10.1 → langgraph_agent_toolkit-0.10.2}/.pre-commit-config.yaml

@@ -48,6 +48,6 @@ repos:
         args: [--print-width=80, --prose-wrap=always]
 
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.12.1
+    rev: 0.13.6
     hooks:
       - id: uv-lock

{langgraph_agent_toolkit-0.10.1 → langgraph_agent_toolkit-0.10.2}/CHANGELOG.md

@@ -6,6 +6,94 @@ This file uses the [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 format. The project uses
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.10.2]
+
+### Added
+
+- Add authenticated `/threads` and `/{agent_id}/threads` endpoints. Return
+  paginated conversation IDs for one user and agent without loading message
+  content. Add `list_threads()` and `alist_threads()` to `AgentClient`.
+- Add optional tool selection for native agents and Deep Agents. Reuse LangChain
+  LLM selection and provider tool search. Keep selection disabled by default.
+  Add examples and API benchmarks for tool schemas, calls, and task completion.
+- Add the optional Phoenix observability backend. Support isolated OpenInference
+  traces, remote prompt versions, and feedback annotations. Add a disposable
+  Phoenix server and API end-to-end verification.
+- Return `pending_interrupts` with history pages. Recover saved questions after
+  a lost response or worker restart without executing remote tools.
+- Show MCP forms and URL requests in Streamlit. Support structured answers,
+  decline, cancel, parallel questions, and recovery after a failed request.
+- Preserve tool status and JSON-safe MCP structured content in streaming
+  messages and saved history.
+- Add optional Deep Agents backend, store, and binary offloading configuration.
+  Keep offloading disabled by default. Require blob storage outside graph state.
+- Accept DOCX, PPTX, XLSX, CSV, JSON, and Markdown uploads in Streamlit.
+  Preserve document filenames in standard content blocks.
+- Add native Deep Agents filesystem permissions, skills, memory files, and
+  remote async subagent configuration. Keep these features optional.
+- Preserve typed interrupt response schemas in live responses and history.
+  Accept answers by interrupt ID through `input.resume`.
+- Add per-server `max_sse_event_size` for MCP HTTP connections. Keep the SDK's 1
+  MiB limit unless an operator sets a larger positive limit.
+
+### Changed
+
+- Require `certifi>=2026.10.19` for service and client installations. Use uv
+  0.13.6 for CI, Docker builds, and the lock hook. Exempt certifi from update
+  cooldowns. Use Python 3.13.18 and pip 26.2.2 or later in both Docker images.
+- Update the default Langfuse Python SDK to 5.0.4. Add `langfuse-v5` and keep
+  SDK v2, v3, and v4 selectors. Require server 4.59.0 or later for SDK v5.
+- Update the explicit SDK v4 baseline to 4.18.0. Keep SDK v2 and v3 at 2.60.10
+  and 3.15.0.
+- Select Langfuse Server 4.71.0 for new Compose deployments. Require an explicit
+  `LANGFUSE_SERVER_VERSION` before starting the web and worker services.
+- Update Deep Agents to 0.7.32, LangChain to 1.4.7, Core to 1.7.0, and LangGraph
+  to 1.2.18. Include native document support, filesystem permission fixes, and
+  checkpoint resume fixes.
+- Update the provider integrations, PostgreSQL saver, SQLite saver, MCP, and
+  Studio dependency sets. Require LangSmith `>=0.14.14,<0.15`.
+
+### Fixed
+
+- Protect known credentials in model/database configuration and encoded sources
+  with `SecretStr`. Unwrap them at SDK construction. Hide raw settings inputs in
+  displayed validation errors.
+- Preserve custom progress events when token streaming is disabled. Add real
+  graph tests for interrupted runs and history pagination with subgraphs.
+- Keep tool selection settings independent of agent runtime imports. Restore
+  client and Streamlit startup in the minimal app image without LangChain.
+- Close each distinct agent observability backend during shutdown or failed
+  startup. Include custom agent backends and close shared instances once.
+- Normalize Langfuse base URLs before SDK construction. Prevent duplicate
+  slashes from redirecting telemetry exports without storing traces.
+- Keep public conversation IDs in telemetry sessions. Retain owner and agent
+  scoping for checkpoint storage and conversation locks.
+- Persist Redis queues in an AOF volume. Reject writes under the configured
+  memory limit instead of removing queued keys. Read Redis credentials from the
+  service environment for both startup and health checks.
+- Start the Langfuse worker after web migrations. Use probes supported by the
+  new server images without a `hostname` executable.
+- Mask typed Pydantic secret values before Langfuse SDK serialization. Prevent
+  SDK v2 and v3 from recording their plaintext values.
+- Load MCP schemas before a tool call so the SDK can send `x-mcp-header`
+  arguments. Use server cache policies to reduce repeated catalog requests.
+- Reuse isolated MCP HTTP pools through the worker lifespan. Close them after
+  shutdown or failed startup. Keep standalone calls safe without a manager.
+
+### Documentation
+
+- Explain conversation-list pagination and the existing 100-message history
+  default. Document storage support and migration limits for conversation lists.
+- Add pending-question recovery, Streamlit forms, tool metadata, and direct
+  Python connection management to the MCP and migration guides.
+- Add OpenAI Responses configuration and durable binary storage examples.
+  Explain scoped blobs, checkpoint limits, missing media, and cleanup.
+- Review each intervening dependency release. Explain typed interrupt answers,
+  filesystem permissions, async subagent deployment, and database upgrade
+  limits.
+- Add SDK v5 and server v4 migration steps, reproducible disposable service
+  tests, and a manual CI matrix for SDK v2 through v5.
+
 ## [0.10.1]
 
 ### Changed