Who contributed to AI Agents on August 3, 2026?

5 developers shipped this update, including ccurme, neubig, mkondratek, abeatrix, and saoudrizwan.

What were the notable AI Agents updates?

fix(core): handle injected args for subclasses of BaseTool, fix(langchain): propagate model middleware control flow (#39199), and fix(core): respect include_injected=False with filter_args (#39200).

AI Agents

LangChain, OpenHands, Cline, and LlamaIndex - agent frameworks and coding agents

Pick a date

Topics: AI Agents AI / ML Full archive →

The Wire · Showcase

LANGCHAIN LOCKS DOWN TOOL ARGUMENT HANDLING, CLINE HARDENS RELEASE PIPELINE

By RepoJournal · Filed 07:00 UTC on August 3, 2026 · About AI Agents

5 people shipped this

ccurme @ccurme 5 cited

mkondratek @mkondratek 2 cited

saoudrizwan @saoudrizwan 2 cited

neubig @neubig 1 cited

abeatrix @abeatrix 1 cited

LangChain shipped a burst of tool-handling fixes overnight that close injection gaps in subclasses, while Cline moved desktop signing secrets behind gated environments and killed notification spam.

LangChain's core team landed four consecutive fixes [1] [2] [3] [4] targeting tool argument injection after developers reported issues with subclass argument handling. The most critical fix [4] resolves how injected args flow through BaseTool subclasses, paired with documentation of reserved argument names [5] to prevent future collisions. These aren't theoretical - they fix real bugs users hit when building custom tools. On the Cline side, the team shipped hardening across two fronts: the MCP integration now handles notification bursts by refreshing cached tool lists instead of flooding users with identical toasts [7] [10], and the desktop CI pipeline moved Apple signing and notarization secrets from repository-level access to a gated `PublishDesktop` environment with required reviewer approval [9] [11]. OpenHands merged runtime service routing through server_info [6] to clean up initialization flow. The Cline desktop client also gained token usage visibility in the input toolbar [8], giving users real-time clarity on spend.

Action items

→ Review LangChain tool definitions for use of reserved argument names (run against your custom BaseTool subclasses) langchain-ai/langchain [plan]
→ Update Cline to latest for MCP notification handling fix if testing JetBrains or burst-heavy MCP servers cline/cline [plan]
→ Monitor OpenHands runtime service routing change in staging before rollout OpenHands/OpenHands [monitor]

References

[1] fix(core): handle injected args for subclasses of BaseTool ↗ langchain-ai/langchain
[2] fix(langchain): propagate model middleware control flow (#39199) langchain-ai/langchain
[3] fix(core): respect include_injected=False with filter_args (#39200) langchain-ai/langchain
[4] fix(core): handle injected args for subclasses of BaseTool (#39202) langchain-ai/langchain
[5] fix(core): document reserved argument names for tools (#39207) langchain-ai/langchain
[6] fix: route runtime services through server_info ↗ OpenHands/OpenHands
[7] fix(mcp): refresh lists on list_changed notifications instead of toasting ↗ cline/cline
[8] feat(desktop): show token usage in input toolbar ↗ cline/cline
[9] ci(desktop): gate desktop publish secrets behind PublishDesktop environment ↗ cline/cline
[10] fix(mcp): refresh lists on list_changed notifications instead of toasting (#12619) cline/cline
[11] ci(desktop): gate desktop publish secrets behind PublishDesktop environment (#12854) cline/cline

Quick answers

What shipped in AI Agents on August 3, 2026?: LangChain shipped a burst of tool-handling fixes overnight that close injection gaps in subclasses, while Cline moved desktop signing secrets behind gated environments and killed notification spam. In total, 13 commits and 13 pull requests landed.
Who contributed to AI Agents on August 3, 2026?: 5 developers shipped this update, including ccurme, neubig, mkondratek, abeatrix, and saoudrizwan.
What were the notable AI Agents updates?: fix(core): handle injected args for subclasses of BaseTool, fix(langchain): propagate model middleware control flow (#39199), and fix(core): respect include_injected=False with filter_args (#39200).

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

AI Agents Aug 5

HITL APPROVAL GATES STOP SILENTLY FAILING OPEN, AIOHTTP FIXES REDIRECT LEAKS ACROSS LANGCHAIN STACK

LangChain plugged a critical security hole in human-in-the-loop middleware where invalid configurations silently disabled approval gates, while simultaneously patching a cascade of aiohttp vulnerabilities that leak headers across origin boundaries.

ai-agents 121 shipped

AI Agents Aug 4

LANGCHAIN PLUGS RESOURCE LEAK, CLINE ADDS CONTEXT-WINDOW RECOVERY

LangChain fixed a critical event-loop leak in streaming tracers that was breaking Python 3.14+ tests, while Cline shipped context-window overflow detection and recovery across its SDK.

+10

ai-agents 73 shipped

AI Agents Aug 2

CLINE CHECKPOINTS NOW REWIND RELIABLY ACROSS CLI AND VSCODE

Cline shipped a four-commit fix that makes workspace snapshots actually work as true rewinding across both the VS Code extension and CLI after days of checkpoint failures broke both surfaces.

ai-agents 40 shipped

Elsewhere on the wire

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.

+10

llms 240 shipped

@CachyOS Aug 6

WIKI TRANSLATION ROLLBACK CHAOS, MIRROR STACK HOLDING STEADY

CachyOS wiki maintainers are caught in a revert loop over German translations while the status infrastructure logs 55 commits without incident.

infra 57 shipped

Elixir & Phoenix Aug 6

ELIXIR BUMPS ZIZMOR SECURITY SCANNER TO 1.28.0

The Elixir repo updated its CI security action overnight, pulling in the latest zizmor static analysis tooling.

elixir 1 shipped

@dotnet Aug 6

DOTNET FOUNDATION PULLS iOS METRICS INTO FOCUS AS RUNTIME HARDENS HTTP PARSING

Performance team fixed iOS size reporting to measure only distributable packages, while runtime clamped down on RFC 9112 compliance for chunked encoding.