Tool Use

LangChain Core version 1.2.28 has been released with improvements to template sanitization. This patch release follows version 1.2.27 and includes a fix that adds enhanced sanitization logic to templates, improving security and robustness. The release is part of the ongoing LangChain framework maintenance and development cycle.

crewAI 1.14.1rc1 introduces async checkpoint TUI browser and streaming output enhancements, along with critical security updates and architectural improvements. Key changes include CVE-2026-1839 resolution via transformers bump, dynamic tool field exclusion, and refactored provider architecture using BaseModel discriminators. The release focuses on async/streaming capabilities, security hardening, and code quality improvements across the framework.

crewAI 1.14.1 introduces async checkpoint TUI browser functionality and improves streaming output handling with async context managers. The release includes critical security updates (CVE-2026-1839 fix via transformers bump), bug fixes for checkpoint registration and tool name sanitization, and architectural refactoring to use dynamic field exclusion and shared singleton patterns. Key improvements enhance developer experience through better CLI tooling and provider type discrimination.

langchain-tests version 1.1.6 is a maintenance release that includes updates to standard tests for sandbox backends, security patches for Pygments (CVE-2026-4539), and dependency bumps across multiple packages including requests, orjson, and other utilities. The release also includes CI/CD improvements such as pytest streaming output suppression and optimized dependency installation in lint targets.

Claude Code v2.1.96 is a patch release that fixes a critical Bedrock authentication regression introduced in v2.1.94. The fix addresses 403 authorization errors when using AWS_BEARER_TOKEN_BEDROCK or CLAUDE_CODE_SKIP_BEDROCK_AUTH environment variables. This release restores proper header handling for Bedrock API requests.

OpenClaw v2026.4.8 is a maintenance release focusing on fixing import path issues in bundled channels and plugins, improving agent execution reporting, and enhancing proxy support. Key fixes address missing file references during gateway startup, plugin compatibility metadata alignment, and Slack integration improvements. The release ensures proper fallback policies for agent execution and enables proxy-only deployments to function correctly.

Claude Code v2.1.94 introduces Amazon Bedrock support via Mantle, increases default effort levels for API users, and adds enhanced Slack integration with compact channel headers. The release includes significant bug fixes for rate-limiting handling, macOS login issues, plugin skill invocation naming, and terminal rendering problems across multiple platforms including VSCode.

crewAI 1.14.0 introduces checkpoint management with CLI commands and SqliteProvider storage, implements runtime state checkpointing with an event system, and refactors the executor. Security enhancements include SSRF/path traversal protections and RAG tool validation. The release also optimizes memory serialization by excluding embedding vectors and addresses critical CVE-2026-35030 via litellm upgrade.

This cookbook demonstrates building a Claude-powered threat intelligence enrichment agent that autonomously investigates Indicators of Compromise (IOCs) by querying multiple threat intel sources, correlating findings, mapping to MITRE ATT&CK, and generating structured reports for SIEM/SOAR integration. The agent uses Claude's tool-use capabilities to decide which intelligence sources to query, chain tool calls based on discoveries, and convert free-text analysis into analyst-ready JSON reports. The architecture uses simulated threat intel backends that can be swapped with real APIs (VirusTotal, AbuseIPDB, Shodan, etc.) without changing orchestration logic.

langchain-core version 1.2.27 was released with a critical fix for handling symlinks in deprecated prompt save paths. The release includes a minor chore update adding clarification comments about the pygments dependency requirement. This patch addresses a reported issue that could affect users relying on legacy prompt saving functionality.

crewAI 1.14.0a4 introduces checkpoint storage capabilities with SqliteProvider and CheckpointConfig, implements runtime state checkpointing with an event system, and refactors the executor. Key improvements include guardrail tracing enhancements, embedding vector exclusion from memory serialization to reduce token usage, and a security bump to litellm. The release also deprecates CodeInterpreterTool and code execution parameters while improving documentation and performance with JSONB storage.

langchain-ollama version 1.1.0 introduces several new features and improvements including support for response_format, logprobs, and embedding dimensions, along with critical bug fixes for message serialization and base_url handling. The release includes dependency updates for security (CVE-2026-4539), improved error handling, and code quality enhancements across the Ollama integration package.

OpenAI Agents Python v0.13.5 introduces callable approval policies for local MCP servers, adds a public flush_traces API for trace management, and fixes critical issues with AnyLLM reasoning extraction and SQLite session serialization. This release improves agent security, observability, and data consistency while maintaining backward compatibility.

OpenClaw v2026.4.5 is a major release introducing breaking config changes with migration support, new media generation tools (video, music, image), expanded provider integrations (Qwen, Fireworks AI, StepFun, Amazon Bedrock Mantle), multilingual control UI support, enhanced approval workflows for iOS and Matrix, experimental memory dreaming features with weighted recall, and improved prompt caching stability across multiple dimensions.

Claude Code v2.1.92 introduces enhanced security policies with remote settings refresh, an interactive Bedrock setup wizard for AWS integration, improved cost transparency with per-model breakdowns, and numerous bug fixes. Key improvements include better session naming with hostname prefixes, fixed subagent spawning issues, enhanced prompt cache feedback for Pro users, and performance optimizations for the Write tool. The release also streamlines the CLI by removing `/tag` and `/vim` commands while improving terminal compatibility and sandbox security.

LangChain Core v1.2.26 release includes fixes for Bedrock model initialization and serialization, adds ChatBaseten to the serializable mapping, removes deprecated gpt-3.5-turbo references from documentation, and corrects parameter names in filter_messages docstring examples. This patch release focuses on improving model compatibility, serialization support, and documentation accuracy.

LangChain v1.2.15 is a minor release that includes a dependency update bumping aiohttp from version 3.13.3 to 3.13.4 in the langchain_v1 library. This patch addresses potential improvements or security fixes in the aiohttp HTTP client library. The release represents incremental maintenance work on the LangChain framework.

Claude Code v2.1.91 introduces MCP tool result persistence overrides supporting up to 500K characters, adds shell execution disabling options, enables multi-line prompts in deep links, and allows plugins to ship executables. The release includes critical fixes for transcript chain breaks, terminal key handling, plan mode persistence in remote sessions, and JSON schema validation, plus performance improvements and enhanced API guidance.

LangChain Core version 1.2.25 is a patch release that includes hardened validation for text file handling in deprecated prompt loading functions and documentation typo corrections. This minor update improves robustness and code quality without introducing breaking changes.

OpenClaw v2026.4.2 is a major release featuring significant architectural improvements including restoration of the core Task Flow substrate with managed sync modes, migration of plugin configurations (xAI and Firecrawl) from legacy core paths to plugin-owned paths, and numerous provider/channel fixes. Key additions include Android assistant integration, enhanced Matrix mentions, Feishu comment workflows, and centralized provider transport policy handling. The release includes breaking changes requiring config migration via `openclaw doctor --fix`.