v1.107.7 v2.53.0
HumanSignal/label-studioSep 30, 2026 → Oct 2, 20262 days between releases
What's New
Major v2 release introduces built-in plugins, managed subagents, and critical concurrency security fixes.
Breaking Changes
- SubAgents no longer load agent files by default (deprecated `inherit_tools`).
- clai2 session naming has been moved into clai2 itself.
New Features
- New built-in plugins: posthog, grain, and linear.
- Introduction of the ToolCallJudge to assess tool calls.
- Support for managed subagents in CLAI2.
- SystemOneModel integration for decision models.
- AbsurdDurability as a replacement for pydantic-ai-absurd.
Improvements
- Added `oneOf` schema support to `TestModel`'s generated data.
- Made `clai2` plugins declarative.
- Improved concurrency handling with stricter `ConcurrencyLimiter` logic.
Bug Fixes
- Fixed ConcurrencyLimitedModel resource exhaustion vulnerability (GHSA-6fqq-452j-qhrp).
Upgrade Notes
Users must update configuration to explicitly load tools for SubAgents or migrate session naming logic to the new `clai2` handling. The v2 line introduces a critical security fix for concurrency limits that does not apply to v1.
The Two Releases
v1.107.7 (2026-09-29)
Sep 30, 2026· 22 days ago
A maintenance release for the v1 line that backports the security fix for web_fetch released in v2.52.0.
Full release notesv2.53.0 (2026-10-01)
Oct 2, 2026· 20 days ago
This release patches a critical security vulnerability in ConcurrencyLimitedModel and introduces new built-in plugins, managed subagents, and the ToolCallJudge.
Full release notes