1.11.1

crewAIInc/crewAI1.11.1Mar 23, 2026by lorenzejay

AI Summary

A patch release that fixes security vulnerabilities by updating dependencies like pypdf, tinytag, and langchain-core. It also adds a flow structure serializer for introspection and prevents path traversal in FileWriterTool.

Key Highlights

  • Fix security vulnerabilities by bumping pypdf, tinytag, and langchain-core
  • Add flow_structure() serializer for Flow class introspection
  • Prevent path traversal in FileWriterTool
  • Fix lock_store crash when redis package is not installed
  • Add missing event listeners documentation

New Features

  • flow_structure() serializer
  • Security vulnerability fixes
  • FileWriterTool path traversal prevention
  • LLM config preservation across HITL resume

Full Release Notes

## What's Changed

### Features
- Add flow_structure() serializer for Flow class introspection.

### Bug Fixes
- Fix security vulnerabilities by bumping pypdf, tinytag, and langchain-core.
- Preserve full LLM config across HITL resume for non-OpenAI providers.
- Prevent path traversal in FileWriterTool.
- Fix lock_store crash when redis package is not installed.
- Pass cache_function from BaseTool to CrewStructuredTool.

### Documentation
- Add publish custom tools guide with translations.
- Update changelog and version for v1.11.0.
- Add missing event listeners documentation.

### Refactoring
- Replace urllib with requests in pdf loader.
- Replace Any-typed callback and model fields with serializable types.

## Contributors

@alex-clawd, @danielfsbarreto, @dependabot[bot], @greysonlalonde, @lorenzejay, @lucasgomide, @mattatcha, @theCyberTech, @vinibrsl