Who contributed to AI Agents on August 1, 2026?

10 developers shipped this update, including jkennedyvz, nick-hollon-lc, hieptl, roian6, neubig, VascoSch92, Sufiyan Khan, and Saoud Rizwan, and 2 more.

What were the notable AI Agents updates?

fix(core): redact streaming callback options, fix(core): type text stream projections, and fix(core): redact streaming callback options (#39179).

AI Agents

LangChain, OpenHands, Cline, and LlamaIndex - agent frameworks and coding agents

Pick a date

Topics: AI Agents AI / ML Full archive →

The Wire · Showcase

LANGCHAIN PATCHES CREDENTIAL LEAK IN STREAMING CALLBACKS

By RepoJournal · Filed 07:01 UTC on August 1, 2026 · About AI Agents

10 people shipped this

jkennedyvz @jkennedyvz 2 cited

nick-hollon-lc @nick-hollon-lc 2 cited

VascoSch92 @VascoSch92 2 cited

Saoud Rizwan @saoudrizwan 2 cited

roian6 @roian6 1 cited

Cline Test @cline-test-bot 1 cited

hieptl @hieptl

neubig @neubig

Sufiyan Khan @CoderSufiyan

Tomás Barreiro @BarreiroT

LangChain patched a critical flaw that exposed remote MCP credentials to callback handlers and persisted traces, even when invocation params were redacted.

The vulnerability [1] lived in streaming callbacks that constructed options from original, unredacted kwargs instead of sanitized integration parameters. Remote credentials could leak to LangSmith traces and callback handlers downstream. The fix applies integration-sanitized parameters to streaming and v3 streaming-event callbacks while preserving original values for model invocation [3]. Across the stack, LangChain also fixed type annotations for text stream projections [2], updated Anthropic config tests [4], and OpenHands shipped live agent activity visualization in chat [5] while ironing out composer gating and run status rendering bugs [6] [7]. Cline closed out the sprint with fixes for Slack bot mention stripping [10], CLI dialog cleanup on exit [8], and browser opener failures on headless hosts [9].

Action items

→ Update LangChain to redacted streaming callbacks patch langchain-ai/langchain [immediate]
→ Review any callback handlers consuming streaming options for credential exposure langchain-ai/langchain [immediate]
→ Monitor OpenHands live activity features and profile gating logic in canvases OpenHands/OpenHands [plan]
→ Deploy Cline CLI fixes for Slack and headless environment stability cline/cline [plan]

References

[1] fix(core): redact streaming callback options ↗ langchain-ai/langchain
[2] fix(core): type text stream projections ↗ langchain-ai/langchain
[3] fix(core): redact streaming callback options (#39179) langchain-ai/langchain
[4] fix(langchain): update Anthropic config test (#39172) langchain-ai/langchain
[5] feat: show live agent activity in chat ↗ OpenHands/OpenHands
[6] fix(home): don't gate the composer on the seeded default profile's LLM ref ↗ OpenHands/OpenHands
[7] fix(automations): render CANCELLED and SKIPPED run statuses ↗ OpenHands/OpenHands
[8] fix(cli): silence dialog-container 'not a child of __root__' warning on exit (#12795) cline/cline
[9] fix(cli): don't crash when no browser opener binary exists (#12782) cline/cline
[10] fix(connectors): strip the Slack bot mention from incoming messages (#12780) cline/cline

Quick answers

What shipped in AI Agents on August 1, 2026?: LangChain patched a critical flaw that exposed remote MCP credentials to callback handlers and persisted traces, even when invocation params were redacted. In total, 36 commits, 35 pull requests, and 1 releases landed.
Who contributed to AI Agents on August 1, 2026?: 10 developers shipped this update, including jkennedyvz, nick-hollon-lc, hieptl, roian6, neubig, VascoSch92, Sufiyan Khan, and Saoud Rizwan, and 2 more.
What were the notable AI Agents updates?: fix(core): redact streaming callback options, fix(core): type text stream projections, and fix(core): redact streaming callback options (#39179).

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

AI Agents Aug 5

HITL APPROVAL GATES STOP SILENTLY FAILING OPEN, AIOHTTP FIXES REDIRECT LEAKS ACROSS LANGCHAIN STACK

LangChain plugged a critical security hole in human-in-the-loop middleware where invalid configurations silently disabled approval gates, while simultaneously patching a cascade of aiohttp vulnerabilities that leak headers across origin boundaries.

ai-agents 121 shipped

AI Agents Aug 4

LANGCHAIN PLUGS RESOURCE LEAK, CLINE ADDS CONTEXT-WINDOW RECOVERY

LangChain fixed a critical event-loop leak in streaming tracers that was breaking Python 3.14+ tests, while Cline shipped context-window overflow detection and recovery across its SDK.

+10

ai-agents 73 shipped

AI Agents Aug 3

LANGCHAIN LOCKS DOWN TOOL ARGUMENT HANDLING, CLINE HARDENS RELEASE PIPELINE

LangChain shipped a burst of tool-handling fixes overnight that close injection gaps in subclasses, while Cline moved desktop signing secrets behind gated environments and killed notification spam.

ai-agents 26 shipped

Elsewhere on the wire

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.

+10

llms 240 shipped

@CachyOS Aug 6

WIKI TRANSLATION ROLLBACK CHAOS, MIRROR STACK HOLDING STEADY

CachyOS wiki maintainers are caught in a revert loop over German translations while the status infrastructure logs 55 commits without incident.

infra 57 shipped

Elixir & Phoenix Aug 6

ELIXIR BUMPS ZIZMOR SECURITY SCANNER TO 1.28.0

The Elixir repo updated its CI security action overnight, pulling in the latest zizmor static analysis tooling.

elixir 1 shipped

@dotnet Aug 6

DOTNET FOUNDATION PULLS iOS METRICS INTO FOCUS AS RUNTIME HARDENS HTTP PARSING

Performance team fixed iOS size reporting to measure only distributable packages, while runtime clamped down on RFC 9112 compliance for chunked encoding.