The Wire · Showcase
LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0
By RepoJournal · Filed · About AI Agents
LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.
LangChain patched a security vulnerability where Git remote URLs embedded in evaluation run tags could expose credentials [1]. The fix strips userinfo from HTTPS and SSH remotes while preserving repository identity, failing closed on malformed values. Separately, `ChatAnthropic.bind_tools` no longer crashes when one bound tool has an unsupported schema, instead preserving root-level `allOf` schemas while filtering `oneOf` and `anyOf` [2]. LangChain also expanded `init_chat_model` to support the `langsmith` provider prefix, routing requests through LangSmith Gateway's Responses API [3]. On the agent automation front, OpenHands shipped 1.10.0 with Canvas now defaulting to GLM 5.2, activity log export, and a featured automations dashboard [4]. Cline released three major updates: Desktop v0.0.9 ships a universal macOS binary for both Apple Silicon and Intel, CLI v3.0.50 adds user-selectable color themes, and SDK v0.0.70 hard-blocks file-editing commands in plan mode instead of relying on prompts alone [5] [6] [7]. Across all three repos, the ecosystem recorded 23 commits, 24 PRs, and 7 releases in the last 24 hours.
One email a day. Unsubscribe in one click.
Keep up with AI Agents in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Upgrade LangChain to patch Git credential exposure in evaluation runs langchain-ai/langchain [immediate]
- → Test Anthropic tool bindings after upgrading to latest LangChain langchain-ai/langchain [plan]
- → Update OpenHands deployment to 1.10.0 for GLM 5.2 and dashboard features OpenHands/OpenHands [plan]
- → Review Cline SDK v0.0.70 plan mode file-blocking changes before integrating cline/cline [monitor]
References
- [1] fix(langchain): sanitize evaluation Git remote tags (#39254) langchain-ai/langchain
- [2] fix(anthropic): handle tool schemas with unsupported top-level composition (#39273) langchain-ai/langchain
- [3] feat(langchain): add LangSmith provider to `init_chat_model` ↗ langchain-ai/langchain
- [4] v1.10.0 ↗ OpenHands/OpenHands
- [5] Desktop v0.0.9 ↗ cline/cline
- [6] CLI v3.0.50 ↗ cline/cline
- [7] SDK v0.0.70 ↗ cline/cline