1.14.2

What's Changed

Features

• Add checkpoint resume, diff, and prune commands with improved discoverability.
• Add from_checkpoint parameter to Agent.kickoff and related methods.
• Add template management commands for project templates.
• Add resume hints to devtools release on failure.
• Add deploy validation CLI and enhance LLM initialization ergonomics.
• Add checkpoint forking with lineage tracking.
• Enrich LLM token tracking with reasoning tokens and cache creation tokens.

Bug Fixes

• Fix prompt on stale branch conflicts in devtools release.
• Patch vulnerabilities in authlib, langchain-text-splitters, and pypdf.
• Scope streaming handlers to prevent cross-run chunk contamination.
• Dispatch Flow checkpoints through Flow APIs in TUI.
• Use recursive glob for JSON checkpoint discovery.
• Handle cyclic JSON schemas in MCP tool resolution.
• Preserve Bedrock tool call arguments by removing truthy default.
• Emit flow_finished event after HITL resume.
• Fix various vulnerabilities by updating dependencies, including requests, cryptography, and pytest.
• Fix to stop forwarding strict mode to Bedrock Converse API.

Documentation

• Document missing parameters and add Checkpointing section.
• Update changelog and version for v1.14.2 and previous release candidates.
• Add enterprise A2A feature documentation and update OSS A2A docs.

Contributors

@Yanhu007, @alex-clawd, @github-actions[bot], @greysonlalonde, @iris-clawd, @lorenzejay, @lucasgomide

1.14.2rc1

What's Changed

Bug Fixes

• Fix handling of cyclic JSON schemas in MCP tool resolution
• Fix vulnerability by bumping python-multipart to 0.0.26
• Fix vulnerability by bumping pypdf to 6.10.1

Documentation

• Update changelog and version for v1.14.2a5

Contributors

@greysonlalonde

1.14.2a5

What's Changed

Documentation

• Update changelog and version for v1.14.2a4

Contributors

@greysonlalonde

1.14.2a4

What's Changed

Features

• Add resume hints to devtools release on failure

Bug Fixes

• Fix strict mode forwarding to Bedrock Converse API
• Fix pytest version to 9.0.3 for security vulnerability GHSA-6w46-j5rx-g56g
• Bump OpenAI lower bound to >=2.0.0

Documentation

• Update changelog and version for v1.14.2a3

Contributors

@greysonlalonde

1.14.2a3

What's Changed

Features

• Add deploy validation CLI
• Improve LLM initialization ergonomics

Bug Fixes

• Override pypdf and uv to patched versions for CVE-2026-40260 and GHSA-pjjw-68hj-v9mw
• Upgrade requests to >=2.33.0 for CVE temp file vulnerability
• Preserve Bedrock tool call arguments by removing truthy default
• Sanitize tool schemas for strict mode
• Deflake MemoryRecord embedding serialization test

Documentation

• Clean up enterprise A2A language
• Add enterprise A2A feature documentation
• Update OSS A2A documentation
• Update changelog and version for v1.14.2a2

Contributors

@Yanhu007, @greysonlalonde

1.14.2a2

What's Changed

Features

• Add checkpoint TUI with tree view, fork support, and editable inputs/outputs
• Enrich LLM token tracking with reasoning tokens and cache creation tokens
• Add from_checkpoint parameter to kickoff methods
• Embed crewai_version in checkpoints with migration framework
• Add checkpoint forking with lineage tracking

Bug Fixes

• Fix strict mode forwarding to Anthropic and Bedrock providers
• Harden NL2SQLTool with read-only default, query validation, and parameterized queries

Documentation

• Update changelog and version for v1.14.2a1

Contributors

@alex-clawd, @github-actions[bot], @greysonlalonde, @lucasgomide

1.14.2a1

What's Changed

Bug Fixes

• Fix emission of flow_finished event after HITL resume
• Fix cryptography version to 46.0.7 to address CVE-2026-39892

Refactoring

• Refactor to use shared I18N_DEFAULT singleton

Documentation

• Update changelog and version for v1.14.1

Contributors

@greysonlalonde

1.14.1

What's Changed

Features

• Add async checkpoint TUI browser
• Add aclose()/close() and async context manager to streaming outputs

Bug Fixes

• Fix regex for template pyproject.toml version bumps
• Sanitize tool names in hook decorator filters
• Fix checkpoint handlers registration when CheckpointConfig is created
• Bump transformers to 5.5.0 to resolve CVE-2026-1839
• Remove FilteredStream stdout/stderr wrapper

Documentation

• Update changelog and version for v1.14.1rc1

Refactoring

• Replace hardcoded denylist with dynamic BaseTool field exclusion in spec gen
• Replace regex with tomlkit in devtools CLI
• Use shared PRINTER singleton
• Make BaseProvider a BaseModel with provider_type discriminator

Contributors

@greysonlalonde, @iris-clawd, @joaomdmoura, @lorenzejay

1.14.1rc1

What's Changed

Features

• Add async checkpoint TUI browser
• Add aclose()/close() and async context manager to streaming outputs

Bug Fixes

• Fix template pyproject.toml version bumps using regex
• Sanitize tool names in hook decorator filters
• Bump transformers to 5.5.0 to resolve CVE-2026-1839
• Register checkpoint handlers when CheckpointConfig is created

Refactoring

• Replace hardcoded denylist with dynamic BaseTool field exclusion in spec gen
• Replace regex with tomlkit in devtools CLI
• Use shared PRINTER singleton
• Make BaseProvider a BaseModel with provider_type discriminator
• Remove FilteredStream stdout/stderr wrapper
• Remove unused flow/config.py

Documentation

• Update changelog and version for v1.14.0

Contributors

@greysonlalonde, @iris-clawd, @joaomdmoura

1.14.0

What's Changed

Features

• Add checkpoint list/info CLI commands
• Add guardrail_type and name to distinguish traces
• Add SqliteProvider for checkpoint storage
• Add CheckpointConfig for automatic checkpointing
• Implement runtime state checkpointing, event system, and executor refactor

Bug Fixes

• Add SSRF and path traversal protections
• Add path and URL validation to RAG tools
• Exclude embedding vectors from memory serialization to save tokens
• Ensure output directory exists before writing in flow template
• Bump litellm to >=1.83.0 to address CVE-2026-35030
• Remove SEO indexing field causing Arabic page rendering

Documentation

• Update changelog and version for v1.14.0
• Update quickstart and installation guides for improved clarity
• Add storage providers section, export JsonProvider
• Add AMP Training Tab guide

Refactoring

• Clean up checkpoint API
• Remove CodeInterpreterTool and deprecate code execution parameters

Contributors

@alex-clawd, @github-actions[bot], @greysonlalonde, @iris-clawd, @joaomdmoura, @lorenzejay, @lucasgomide