Tool Use

OpenAI Agents Python SDK v0.17.0 introduces gpt-realtime-2 as the default model for RealtimeAgents and implements a critical security fix for sandbox local source materialization. The update constrains local artifact sources to remain within the SDK process base directory unless explicitly granted via SandboxPathGrant, closing a local artifact boundary vulnerability. Applications relying on copying trusted files from outside the base directory must now explicitly grant those paths at the manifest level.

LangChain Core version 0.3.86 has been released with a critical security fix. This patch backports a path-traversal vulnerability fix (CVE-2026-34070, GHSA-qh6h-p6c9-ff54) to the v0.3 branch. Users should upgrade immediately to address the security issue.

OpenClaw v2026.5.7 is a maintenance release focused on stability, security, and reliability improvements across plugin publishing, CLI tools, authentication, and multi-channel integrations. Key fixes address cron job persistence, Discord/Telegram/WhatsApp message routing, OAuth recovery, permission enforcement, and context caching issues. The release includes enhancements to CLI output formatting, voice capture quality, and error handling to prevent partial publishes and stale session states.

LangChain Classic version 1.0.7 has been released with deprecation changes. The primary update involves deprecating the hub functionality and limiting loads/dumps operations. This release represents a maintenance update focused on cleaning up legacy features and improving API stability.

LangChain version 0.3.30 has been released with updates since v0.3.29. The release includes a backport of loads/dumps hardening to v0.3 and deprecation of the hub feature. These changes improve serialization robustness and signal the deprecation of hub functionality in the v0.3 branch.

OpenAI Agents Python v0.16.1 is a maintenance release focusing on stability and reliability improvements. Key fixes address chat completion streaming indexes, MCP policy validation, session history recovery, corrupt state handling, and function tool input validation. The release includes documentation updates covering tool execution concurrency and changelog entries.

This cookbook demonstrates building a multiagent coordinator system using Claude Managed Agents to automate sales-proposal generation. A coordinator agent orchestrates three specialist subagents—a web-search researcher, a case-study librarian, and a rules-based pricing modeler—each with scoped toolsets and specific responsibilities. The pattern shows how to structure heterogeneous teams, use per-role tool scoping, and leverage thread_created/thread_message_received events for agent coordination to assemble tailored sales proposals.

OpenAI Agents Python SDK v0.16.0 introduces significant updates including a default model change from gpt-4.1 to gpt-5.4-mini, new configuration options for disabling max_turns limits, SDK-side tool execution concurrency control, and server-prefixed MCP tool naming to prevent conflicts. The release also includes stability fixes for tool call output indexes and security improvements for symlink handling. These changes enhance performance and provide greater flexibility for agent configuration while maintaining backward compatibility through explicit model specification.

Claude Code v2.1.132 is a maintenance release focused on stability, terminal handling, and user experience improvements. Key fixes address graceful shutdown behavior, emoji/character rendering issues, clipboard operations, IDE terminal compatibility, and MCP server reliability. The release also adds environment variables for session tracking and alternate-screen rendering control, plus improvements to slash command UI and error messaging.

LangChain v1.3.0a2 is an alpha release featuring improvements to stream events protocol (v3), ordered schema resolution, and agent middleware enhancements. The release includes performance optimizations, bug fixes across multiple integrations (OpenAI, Anthropic, Fireworks), and new features like HITL middleware respond decision and dynamic tool registration. Key updates involve dependency bumps, security patches, and refinements to the agent creation and model initialization systems.

crewAI v1.14.5a3 is a maintenance release focusing on bug fixes and architectural improvements. Key changes include correcting the status endpoint path structure, upgrading gitpython for security compliance, and extracting the CLI into a standalone package. This refactoring improves modularity while maintaining backward compatibility.

OpenClaw v2026.5.6 addresses critical OAuth routing issues, plugin fetch header handling, and debug proxy normalization. The release reverts a problematic repair from v2026.5.5 that incorrectly rewrote OpenAI Codex OAuth routes, which could break GPT-5.5 setups. Additional fixes improve fetch request handling across plugins, debug proxies, and web requests to prevent symbol metadata rejection and resource cleanup issues.

OpenAI Agents Python v0.15.3 is a maintenance release focused on bug fixes and stability improvements. Key fixes address MCP (Model Context Protocol) tool input schema mutations, JSON validation for non-object inputs, deterministic error handling for duplicate tools, and audio delta tolerance during format negotiation. The release includes documentation updates and expanded test coverage for edge cases.

OpenClaw v2026.5.5 is a maintenance release focused on fixing critical bugs across multiple messaging platforms (Feishu, LINE, Telegram, Discord, Matrix, Slack), improving control UI responsiveness and session management, resolving provider integration issues (xAI/Grok, Fireworks), and enhancing diagnostic tools. Key improvements include fixing message routing, webhook validation, tool progress rendering, approval delivery retries, and heartbeat timeout handling. The release also addresses plugin management, media handling, and gateway stability issues.

Claude Code v2.1.131 addresses two critical bugs: a VS Code extension activation failure on Windows caused by a hardcoded build path in the bundled SDK's createRequire polyfill, and Mantle endpoint authentication failures due to a missing x-api-key header. These fixes improve cross-platform compatibility and API authentication reliability.

OpenAI Agents Python v0.15.2 introduces context management model settings and fixes critical issues with conversation session replay, tool execution, and error handling. The release includes 11 bug fixes addressing assistant conversation item IDs, function tool tracing, MCP tool metadata isolation, and stream terminal rejection. Comprehensive test coverage improvements ensure reliability across realtime tool behaviors, handoff mechanisms, and tool identity helpers.

Claude Code v2.1.129 introduces plugin URL fetching, improved output synchronization, and auto-update capabilities for package managers. The release includes refinements to model discovery, history search behavior, and skill overrides, along with numerous bug fixes addressing UI regressions, cache handling, OAuth issues, and policy enforcement. Key improvements enhance terminal compatibility, conversation management, and enterprise security features.

langchain-classic version 1.0.6 release includes security hardening fixes for deserialization and manifest loading, a dependency bump for jupyter-server, and version-specific handling for hub.pull deprecation. The release focuses on improving robustness against untrusted inputs and maintaining compatibility with the classic API.

LangChain Core version 0.3.85 was released with a critical security fix that hardens the `load()` function against untrusted manifests. This patch addresses potential vulnerabilities when loading manifests from untrusted sources. The release follows version 0.3.84 and includes security improvements to the core library.

langchain-core version 1.3.3 was released with security hardening, deprecation fixes, and stability improvements. Key changes include protecting the `load()` function against untrusted manifests, preserving structured inputs on tool runs in tracers, and validating batch_size to prevent infinite loops. The release also includes dependency updates and marks stream_v2/astream_v2 as beta features.