Starstruk Logo MarkStarstruk

v3.3.2

OpenBB-finance/OpenBBv3.3.2Apr 28, 2026by kichanyurd

AI Summary

This release focuses on stability and security for the AI agent framework. It introduces a new environment variable for controlling tool timeouts and fixes critical bugs related to WebSocket logging and MCP client reconnections.

Key Highlights

  • Added PARLANT_TOOL_CALL_TIMEOUT environment variable to control plugin tool-call timeout
  • Fixed WebSocketLogger event loop starvation causing increasing latency over time
  • Fixed MCP tool clients getting stuck after sessions go stale by adding automatic reconnection
  • Fixed context vars becoming unavailable in resolve_tool plugin endpoint under Uvicorn 0.39+
  • Upgraded dependencies to address known CVEs across authlib, requests, fastmcp, and litellm

New Features

  • PARLANT_TOOL_CALL_TIMEOUT environment variable

Full Release Notes

## [3.3.2] - 2026-04-28

### Added

- Add `PARLANT_TOOL_CALL_TIMEOUT` environment variable to control the plugin tool-call timeout

### Changed

- Include guideline description (in addition to the condition) in matcher prompts
- Render active journeys' descriptions in the canned response draft prompt
- Improve error messages surfaced by `EmcieService` to be more diagnostic
- Relax the `aiopenapi3` pin to `>=0.8.1,<0.9.0`

### Fixed

- Fix redundant batch creation in `ToolCaller` across guideline matches, which in some agents caused a lot of latency unnecessarily
- Fix WebSocketLogger event loop starvation which progressively blocked the async event loop, causing increasing latency over time
- Fix `p.Server.current` becoming unavailable in the `resolve_tool` plugin endpoint under Uvicorn 0.39+. Context vars are now restored at the start of `resolve_tool`, mirroring the existing pattern in `call_tool`, so choice providers depending on `p.Server.current` work again
- Fix MCP tool clients getting stuck after sessions go stale. Clients now reconnect automatically instead of failing subsequent calls

### Security

- Upgrade dependencies to address known CVEs: authlib (>=1.6.11), requests (>=2.33.0), fastmcp (>=3.2.0), litellm (>=1.83.0), pytest (>=9.0.3), pyjwt (>=2.11.1), and constrain transitive deps — aiohttp, cryptography, pillow, pyopenssl, werkzeug, Mako, pyasn1, python-multipart, orjson, Pygments, diskcache
- Upgrade chat frontend: vite (>=7.3.2) and override transitive deps: picomatch, lodash, flatted, brace-expansion, immutable, yaml