Release notes for the Agent Assembly Python SDK. Versions follow SemVer starting from 1.0.0; pre-1.0 releases (the current 0.x.y line) may include breaking changes between minor versions and are tracked in the GitHub releases feed.
!!! info "0.x development"
The SDK is in active 0.x development; per-release notes are minimal. Track full changes via the commits to master and the GitHub releases feed.
Third release candidate on the 0.0.1 line. This release tracks the published
agent-assembly core v0.0.1-rc.3: the bundled aasm runtime binary and the
compiled aa-ffi-python extension are pinned to that core tag (AAASM-4056).
Changes since rc.2 are limited to the core-pin promotion — there is no new SDK surface:
- Bump the
aa-core/aa-proto/aa-sdk-clientpins inaa-ffi-pythonto the corev0.0.1-rc.3tag. rc.3 is a security-hardening cut of the core (three verified sweeps) and fixes theaa-gatewaycrates.io publish break (AAASM-4056).
Second release candidate on the 0.0.1 line. This release tracks the published
agent-assembly core v0.0.1-rc.2: the bundled aasm runtime binary and the
compiled aa-ffi-python extension are pinned to that core tag (AAASM-3833).
Changes since rc.1 are limited to the core-pin promotion — there is no new SDK surface:
- Bump the
aa-core/aa-proto/aa-sdk-clientpins inaa-ffi-pythonto the corev0.0.1-rc.2tag (AAASM-3815).
First release candidate on the 0.0.1 line — promotes the Python SDK from
the beta channel to rc. This release tracks the published agent-assembly
core v0.0.1-rc.1: the bundled aasm runtime binary and the compiled
aa-ffi-python extension are pinned to that core tag (AAASM-3763).
Changes since beta.5 are limited to the core-pin promotion plus security and release housekeeping — there is no new SDK surface:
- Require TLS for non-loopback gateway / op-control connections — refuse a Bearer
API key over plaintext
httpand refuse a plaintext gRPC channel to a non-loopback host (AAASM-3685). - Pin third-party reusable CI workflows to commit SHAs (AAASM-3686).
- Fix and pin the CycloneDX SBOM flag in
release-python.yml(AAASM-3722).
Beta iteration of the Python SDK on the 0.0.1 line. Headline of this release is
five new framework adapters, expanding governed-framework coverage:
- LlamaIndex — native adapter walkthrough (AAASM-3536)
- Agno — hooks
FunctionCall.execute/aexecute(AAASM-3537) - Microsoft Agent Framework — builtin adapter (AAASM-3538)
- Smolagents — wraps
Tool.__call__(AAASM-3539) - Haystack — framework adapter (AAASM-3540)
Other notable changes:
- Forward
agent_idand the installed SDK package version throughconnect(AAASM-3683). GatewayClientnow elidesapi_keyfrom__repr__and emitter logs — token hygiene (AAASM-3642 / AAASM-3570).- Supply-chain hardening: PEP 740 attestations on PyPI Trusted Publisher upload,
per-release CycloneDX SBOM, and a
pip-auditadvisory gate in CI (AAASM-3568). - Release safety:
release-python.ymlis now operator-dispatch-only; the corerepository_dispatchauto-publish trigger was removed to stop duplicate-publish collisions on every core release (AAASM-3503). - Fixed the OpenAI Agents adapter to govern the current framework API (AAASM-3528).
- Docs: python-sdk is now the authoritative framework-compatibility source; mkdocs search restored; GA4 + consent mode wired in.
Beta iteration of the Python SDK on the 0.0.1 line. The bundled aasm runtime
binary and compiled aa-ffi-python extension track the agent-assembly
v0.0.1-beta.3 core release.