chore(main): release 0.2.0

[github-actions]

🤖 I have created a release beep boop

0.2.0 (2026-07-01)

Features

• agent_api_keys: one-call webhook-trigger setup endpoint (#329) (9cc71fb)
• agentex-ui: grow chat input vertically for multi-line prompts (#332) (8c060f1)
• retention: strict bool env parsing + stale-RUNNING cleanup override (#306) (5ad81e8)
• schedules: agent run schedules (v1) (#335) (6a66ad3)
• task-messages: add optional is_error to ToolResponseContent (#331) (5020e96)
• update task configs in agentex db on turn (#309) (13eea7a)

Bug Fixes

• authz: grant legacy agent register principal (#325) (cae5f94)
• deps: cap fastapi <0.137.0 to stop OPTIONS preflight 500s (#334) (acbe9e3)
• deps: clear golden-image Trivy CRITICAL/HIGH (litellm, starlette, pyjwt, python-multipart) (#320) (bfa6652)
• schedules: backfill agent_run_schedules deleted_at/version on early-deployed envs (#341) (fc1ba55)
• schedules: grant legacy auth for run schedules (#344) (648e81c)
• streams: cut SSE error-log volume and add Redis pool headroom (#340) (352eaaa)
• streams: snapshot SSE cursor before "connected" to stop first-token drops (#330) (7c2ccfd)
• tasks: preserve task_metadata in combined update and forward merge_params by name (#336) (8c25c64)

Documentation

• document Redis as a required dependency (#343) (4c1740b)
• guides: tracing, framework-agent, and local-sandbox guides (#339) (b43e8c3)
• streaming: document the unified harness surface (#337) (31fd697)

---

This PR was generated with Release Please. See documentation.

Greptile Summary

This is a release-please-generated PR that bumps the workspace to v0.2.0, creates CHANGELOG.md, and updates agentex/openapi.yaml to reflect all features and fixes merged since v0.1.0.

• Version files (.release-please-manifest.json, pyproject.toml, agentex/pyproject.toml, agentex/src/_version.py) and agentex/openapi.yaml are all consistently set to 0.2.0.
• agentex/pyproject.toml tightens security-relevant floors (litellm>=1.84.0 for CVE-2026-49468, python-multipart>=0.0.32 for CVE-2026-53539) and caps FastAPI <0.137.0 to avoid an OTel instrumentation breakage; all three constraints are documented inline.
• agentex/openapi.yaml adds new path groups for /agent_api_keys (including the one-call webhook-trigger endpoint), /agents/{agent_id}/schedules (full CRUD + trigger/pause/resume), and the is_error field on ToolResponseContent.

Confidence Score: 5/5

Safe to merge — all six changed files are version metadata, generated spec, or auto-created changelog with no runtime logic.

Every change is mechanical: release-please bumped version strings, regenerated the OpenAPI spec from the merged feature PRs, and created the changelog. The dependency floor/cap changes in agentex/pyproject.toml are all security-driven and inline-documented. No business logic was modified in this PR.

No files require special attention; all changes are generated or version-metadata only.

Important Files Changed

Filename	Overview
.release-please-manifest.json	Version bumped from 0.1.0 to 0.2.0, consistent with all other version files.
CHANGELOG.md	New file generated by release-please; accurately lists all features, bug fixes, and docs from merged PRs since v0.1.0.
agentex/openapi.yaml	API version bumped to 0.2.0; new endpoints added for agent_api_keys (including webhook-trigger setup), run schedules (CRUD, trigger, pause, resume), and ToolResponseContent.is_error. Pre-existing duplicate path items /agent_api_keys/name/{name} and /agent_api_keys/name/{api_key_name} remain from base but are not newly introduced here.
agentex/pyproject.toml	Version bumped to 0.2.0; security-motivated dependency floor bumps (litellm>=1.84.0 for CVE-2026-49468, python-multipart>=0.0.32 for CVE-2026-53539, fastapi capped <0.137.0 for OTel incompatibility) are all well-documented inline.
agentex/src/_version.py	Single-line version bump to 0.2.0, controlled by release-please annotation.
pyproject.toml	Workspace root version bumped to 0.2.0; override-dependencies are unchanged and carry the correct CVE-fix floors.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    RP[release-please bot] -->|bumps version 0.1.0 → 0.2.0| MF[.release-please-manifest.json]
    RP -->|creates| CL[CHANGELOG.md]
    RP -->|bumps version| VP[pyproject.toml\nworkspace root]
    RP -->|bumps version| VA[agentex/pyproject.toml\nagentex-backend]
    RP -->|bumps version| VV[agentex/src/_version.py]
    RP -->|regenerates spec| OA[agentex/openapi.yaml v0.2.0]

    OA --> NEW1["/agent_api_keys/webhook-trigger\n(one-call webhook setup)"]
    OA --> NEW2["/agents/{id}/schedules\n(CRUD + trigger/pause/resume)"]
    OA --> NEW3["ToolResponseContent.is_error\n(optional field)"]

    VA --> SEC1["litellm ≥1.84.0\n(CVE-2026-49468)"]
    VA --> SEC2["python-multipart ≥0.0.32\n(CVE-2026-53539)"]
    VA --> SEC3["fastapi <0.137.0\n(OTel OPTIONS fix)"]

Loading

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    RP[release-please bot] -->|bumps version 0.1.0 → 0.2.0| MF[.release-please-manifest.json]
    RP -->|creates| CL[CHANGELOG.md]
    RP -->|bumps version| VP[pyproject.toml\nworkspace root]
    RP -->|bumps version| VA[agentex/pyproject.toml\nagentex-backend]
    RP -->|bumps version| VV[agentex/src/_version.py]
    RP -->|regenerates spec| OA[agentex/openapi.yaml v0.2.0]

    OA --> NEW1["/agent_api_keys/webhook-trigger\n(one-call webhook setup)"]
    OA --> NEW2["/agents/{id}/schedules\n(CRUD + trigger/pause/resume)"]
    OA --> NEW3["ToolResponseContent.is_error\n(optional field)"]

    VA --> SEC1["litellm ≥1.84.0\n(CVE-2026-49468)"]
    VA --> SEC2["python-multipart ≥0.0.32\n(CVE-2026-53539)"]
    VA --> SEC3["fastapi <0.137.0\n(OTel OPTIONS fix)"]

Loading

_{Reviews (15): Last reviewed commit: "chore(main): release 0.2.0" | Re-trigger Greptile}

[greptile-apps]

Regenerate the lockfile

The package versions were bumped here and in agentex/pyproject.toml, but uv.lock still records both workspace packages as 0.1.0 (agentex and agentex-backend). The Docker build copies that lockfile and runs uv sync --frozen --no-dev --package agentex-backend and uv export --frozen, so the release image path can fail the frozen-lock freshness check or install/export package metadata from the previous version. Regenerate and commit uv.lock with the 0.1.1 package versions.

Artifacts

Repro: lock metadata check script

• Contains supporting evidence from the run (text/x-python; charset=utf-8).

Repro: lock metadata check output showing stale package versions

• Keeps the command output available without making the summary code-heavy.

Repro: attempted frozen uv sync command output

• Keeps the command output available without making the summary code-heavy.

Repro: attempted frozen uv export command output

• Keeps the command output available without making the summary code-heavy.

_{Ran code and verified through T-Rex}

Prompt To Fix With AI

This is a comment left during a code review.
Path: pyproject.toml
Line: 3

Comment:
**Regenerate the lockfile**

The package versions were bumped here and in `agentex/pyproject.toml`, but `uv.lock` still records both workspace packages as `0.1.0` (`agentex` and `agentex-backend`). The Docker build copies that lockfile and runs `uv sync --frozen --no-dev --package agentex-backend` and `uv export --frozen`, so the release image path can fail the frozen-lock freshness check or install/export package metadata from the previous version. Regenerate and commit `uv.lock` with the `0.1.1` package versions.

How can I resolve this? If you propose a fix, please make it concise.

[github-actions]

✱ Stainless preview builds

This PR will update the agentex-sdk SDKs with the following commit messages.

openapi

chore(main): release 0.2.0

python

chore(main): release 0.2.0

typescript

chore(internal): regenerate SDK with no functional changes

Edit this comment to update them. They will appear in their respective SDK's changelogs.

✅ agentex-sdk-openapi studio · code · diff

Your SDK build had at least one "note" diagnostic, but this did not represent a regression.
generate ✅

✅ agentex-sdk-typescript studio · code · diff

Your SDK build had at least one "warning" diagnostic, but this did not represent a regression.
generate ⚠️ → build ⏭️ (prev: build ✅) → lint ⏭️ (prev: lint ✅) → test ✅

⚡ agentex-sdk-python studio · conflict

Your SDK build resulted in a merge conflict between your custom code and the newly generated changes, which is a regression from the base state.
You don't need to resolve this conflict right now, but you will need to resolve it for your changes to be released to your users. Read more about why this happened here.

---

This comment is auto-generated by GitHub Actions and is automatically kept up to date as you push.
If you push custom code to the preview branch, re-run this workflow to update the comment.
Last updated: 2026-06-25 18:06:43 UTC

[greptile-apps]

Regenerate frozen lockfile

This release bumps the workspace package to 0.2.0, but uv.lock still records both agentex and agentex-backend as 0.1.0. The Docker image copies that lockfile and runs frozen uv export / uv sync for agentex-backend, so the release build can fail the frozen-lock check or install/export package metadata for the previous version instead of this release.

Artifacts

Repro: generated frozen uv check script

• Contains supporting evidence from the run (text/x-shellscript; charset=utf-8).

Repro: frozen uv command output showing stale lockfile validation failure

• Keeps the command output available without making the summary code-heavy.

Repro: uv 0.7.3 installation output used to run the frozen checks

• Keeps the command output available without making the summary code-heavy.

_{Ran code and verified through T-Rex}

Prompt To Fix With AI

This is a comment left during a code review.
Path: pyproject.toml
Line: 3

Comment:
**Regenerate frozen lockfile**

This release bumps the workspace package to `0.2.0`, but `uv.lock` still records both `agentex` and `agentex-backend` as `0.1.0`. The Docker image copies that lockfile and runs frozen `uv export` / `uv sync` for `agentex-backend`, so the release build can fail the frozen-lock check or install/export package metadata for the previous version instead of this release.

How can I resolve this? If you propose a fix, please make it concise.

[greptile-apps]

Update telemetry version defaults

The API version now comes from __version__ and is 0.2.0, but src/utils/otel_metrics.py still falls back to SERVICE_VERSION 0.1.0 and get_meter(..., version="0.1.0"). Internal callers use get_meter without passing a version, so deployments that do not set SERVICE_VERSION emit 0.2.0 service metrics under the old 0.1.0 version, which can make rollout dashboards and version comparisons incorrect.

Artifacts

Repro: Python harness that exercises telemetry version defaults with SERVICE_VERSION unset

• Contains supporting evidence from the run (text/x-python; charset=utf-8).

Repro: harness output showing package version 0.2.0 but telemetry resource and meter version 0.1.0

• Keeps the command output available without making the summary code-heavy.

_{Ran code and verified through T-Rex}

Prompt To Fix With AI

This is a comment left during a code review.
Path: agentex/src/_version.py
Line: 3

Comment:
**Update telemetry version defaults**

The API version now comes from `__version__` and is `0.2.0`, but `src/utils/otel_metrics.py` still falls back to `SERVICE_VERSION` `0.1.0` and `get_meter(..., version="0.1.0")`. Internal callers use `get_meter` without passing a version, so deployments that do not set `SERVICE_VERSION` emit 0.2.0 service metrics under the old 0.1.0 version, which can make rollout dashboards and version comparisons incorrect.

How can I resolve this? If you propose a fix, please make it concise.