Commit Graph
96 Commits
Author SHA1 Message Date
5f9906fbda chore: bump SDK packages to v1.36.0 (#15256)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-07-13 17:32:13 +02:00
e3185990dd chore: bump SDK packages to v1.35.0 (#15240)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-07-11 00:31:30 +02:00
d514ee4061 feat: pass repository metadata to observability traces (#14431)
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: Graham Neubig <gneubig@users.noreply.github.com>
2026-07-09 15:27:31 +02:00
aca05a90af chore: bump SDK packages to v1.34.0 (#15200)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-07-09 07:54:50 -04:00
dce38f63ff chore: bump SDK packages to v1.33.0 (#15177)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-07-08 11:10:37 +02:00
93a5492676 chore: bump SDK packages to v1.32.0 (#15157)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: Simon Rosenberg <157206163+simonrosenberg@users.noreply.github.com>
2026-07-07 17:49:04 +02:00
cc80397ecd chore: bump SDK packages to v1.31.2 (#15156)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-07-07 04:13:21 -06:00
af7efea64f chore: bump SDK packages to v1.31.1 (#15127)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-07-05 21:49:11 +00:00
Robert Brennanandopenhands 8b4cd0d55b build: pin dependency versions exactly (#14384)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-07-02 00:46:45 +02:00
5175125b7e chore: bump SDK and agent-server to 1.30.0 (#15079)
Co-authored-by: Simon Rosenberg <simon@openhands.dev>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-01 14:03:28 +02:00
e6fe5057fc fix: Fix CVE-2026-44681: Update authlib to >=1.6.12 (#14983)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
Co-authored-by: aivong-openhands <ai.vong@openhands.dev>
2026-06-29 14:17:42 -04:00
dependabot[bot]andopenhands b14383f2e8 chore(deps-dev): bump jupyterlab from 4.5.7 to 4.5.9 (#15009)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-26 13:57:17 -04:00
4d9e7af514 chore(security): add Python dependency freshness guardrails (#13754)
Co-authored-by: aivong-openhands <ai.vong@openhands.dev>
Co-authored-by: enyst <engel.nyst@gmail.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-26 03:46:26 +02:00
mamoodiandOpenHands CVE Fix Bot 7ce5e95f8b fix: Fix GHSA-4xgf-cpjx-pc3j: Update pydantic-settings to 2.14.2 (#14979)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-25 12:37:05 -04:00
mamoodiandOpenHands CVE Fix Bot 58b60ef0b4 fix: Fix CVE-2026-54283: Update starlette to 1.3.1 (#14874)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-24 14:30:53 +00:00
mamoodiandOpenHands CVE Fix Bot 29bb4273e0 fix: Fix GHSA-jm82-fx9c-mx94: Update pypdf to >=6.13.3 (#14959)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-24 10:17:49 -04:00
Engel Nystandopenhands b34d67e19f fix: binaryornot Python 3 crash on binary reads (#14518)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-24 04:09:56 +02:00
mamoodiandOpenHands CVE Fix Bot dcb840b105 fix: Fix CVE-2026-44727: Update jupyter-server to 2.20.0 (#14943)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-23 11:39:54 -04:00
mamoodiandOpenHands CVE Fix Bot d9cefcc924 fix: Fix GHSA-6v7p-g79w-8964: Update msgpack to 1.2.1 (#14944)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-23 11:39:27 -04:00
mamoodiandOpenHands CVE Fix Bot f08e219b43 fix: Fix CVE-2026-45409: Update idna to 3.15 (#14946)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-23 11:39:15 -04:00
mamoodiandOpenHands CVE Fix Bot 129584f90e fix: Fix GHSA-gj48-438w-jh9v: Update bleach to 6.4.0 (#14945)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-23 11:39:06 -04:00
Alonaandopenhands c4ca01746e chore: bump SDK and agent-server to 1.29.0 (#14889)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-18 12:26:17 -06:00
mamoodiandOpenHands CVE Fix Bot f27d34ce1e fix: Fix CVE-2026-53539: Update python-multipart to >=0.0.30 (#14876)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-17 15:38:39 -04:00
mamoodiandOpenHands CVE Fix Bot c97bf521bf fix: Fix CVE-2026-54278: Update aiohttp to 3.14.1 (#14871)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-17 11:10:45 -04:00
mamoodiandOpenHands CVE Fix Bot a3cdba68cc fix: Fix CVE-2026-49855: Update tornado to 6.5.7 (#14856)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-17 08:46:26 -04:00
mamoodiandOpenHands CVE Fix Bot 476698afc1 fix: Fix CVE-2026-48526: Update pyjwt to 2.13.0 (#14854)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-16 16:53:49 -04:00
dependabot[bot] 9ab0ddb153 chore(deps): bump pyjwt from 2.12.1 to 2.13.0 (#14852)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 16:16:02 -04:00
Engel Nystandopenhands a947e312d8 refactor(llm): clean up reverse-mapping OpenHands provider models (#14725)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-11 19:38:40 +02:00
3dc83a055d Bump SDK packages to v1.27.0 (#14726)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: simonrosenberg <157206163+simonrosenberg@users.noreply.github.com>
2026-06-09 20:51:31 +02:00
0d77a0d248 Bump SDK packages to v1.26.0 (#14679)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-07 09:51:37 -06:00
64ae075208 Bump SDK packages to v1.25.0 (#14653)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-04 23:41:11 +02:00
dependabot[bot] ea95000794 chore(deps): bump dulwich from 1.2.0 to 1.2.5 (#14625)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 12:14:51 -04:00
1505caaaa9 Upgrade LiteLLM to 1.84.1 (#14396)
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: aivong-openhands <ai.vong@openhands.dev>
2026-05-27 23:03:06 -07:00
aivong-openhandsandOpenHands CVE Fix Bot 1fb2144e49 Fix CVE-2026-41140: Update poetry to 2.3.4 (#14361)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-05-21 10:26:46 -04:00
e8e1eebd22 Fix CVE-2026-44431: Update urllib3 to 2.7.0 (#14481)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
Co-authored-by: ak684 <alona@all-hands.dev>
2026-05-20 15:28:41 -05:00
aivong-openhandsandopenhands ac596597ec fix: replace jwcrypto with joserfc to address CVE-2024-28102 (#14479)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-05-20 14:09:25 -05:00
aivong-openhandsandopenhands 7944f704fe Fix CVE-2026-42561: Update python-multipart to 0.0.28 (#14357)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-05-20 12:00:39 -05:00
aivong-openhandsandOpenHands CVE Fix Bot 50d4ec2b0c Fix CVE-2026-35397: Update jupyter-server to 2.18.2 (#14435)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-05-20 11:07:18 -04:00
aivong-openhandsandOpenHands CVE Fix Bot e5047a82db Fix CVE-2026-41312: Update pypdf to 6.10.2 (#14355)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-05-18 18:25:28 -05:00
aivong-openhandsandOpenHands CVE Fix Bot 68083f275b Fix CVE-2026-44897: Update mistune to 3.2.1 (#14360)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-05-16 10:02:04 -05:00
aivong-openhandsandOpenHands CVE Fix Bot ceb870e811 Fix CVE-2026-44307: Update mako to 1.3.12 (#14356)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-05-16 10:01:18 -05:00
623cf6868d chore(deps-dev): bump notebook from 7.5.5 to 7.5.6 (#14358)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: aivong-openhands <ai.vong@openhands.dev>
2026-05-15 13:30:40 -04:00
6b6810ce16 chore: bump openhands SDK to v1.22.1 (#14424)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: Simon Rosenberg <simon@openhands.dev>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-15 13:20:10 +00:00
aivong-openhandsandopenhands 6362f4e06a Fix CVE-2026-44244: Update gitpython to 3.1.50 (#14354)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-05-13 13:24:41 -05:00
aivong-openhandsandOpenHands CVE Fix Bot 1a4d29c153 Fix GHSA-xqmj-j6mv-4862: Update litellm to 1.83.14 (#14299)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-05-04 16:39:06 -06:00
Tim O'Farrell e86067c15b Removed V0 runtime (#14117) 2026-04-24 15:40:37 -06:00
aivong-openhandsandOpenHands CVE Fix Bot b357c0c3bb Fix CVE-2026-39892: Update cryptography to 46.0.7 (#13968)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-04-22 21:07:29 +02:00
918b0a8b59 chore(deps-dev): bump pytest from 9.0.2 to 9.0.3 (#13935)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: aivong-openhands <ai.vong@openhands.dev>
2026-04-18 20:29:11 +02:00
119b0c99a8 chore(deps): bump pygments from 2.19.2 to 2.20.0 (#13934)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: aivong-openhands <ai.vong@openhands.dev>
2026-04-18 20:14:59 +02:00
aivong-openhandsandOpenHands CVE Fix Bot 5c8d7c4c2d Fix CVE-2026-40347: Update python-multipart to 0.0.26 (#13965)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-04-17 12:32:15 -05:00