v0.4.10 v0.2.29
high risk
msitarzewski/agency-agentsOct 17, 2026 → Oct 19, 20262 days between releases
What's New
Security hardening pass with breaking changes to session activation and API key handling.
Breaking Changes
- Re-activating an agent with a live session now returns a 409 error, requiring session deactivation first.
- Updating the API key from the Web UI now requires the current key to be provided via constant-time comparison.
- AgentCore now assigns hashed IDs to ambiguous identities instead of readable ones to prevent ID collisions.
New Features
- Refreshed Web UI that matches the landing theme.
Improvements
- Security hardening across session lifecycle, tag handling, and file ingestion.
- Namespace isolation fixes for AgentCore, LangGraph, and Vapi integrations.
- Implementation of constant-time comparison for API key updates.
Bug Fixes
- Namespace isolation fixes for AgentCore, LangGraph, and Vapi integrations.
Upgrade Notes
Deactivate active sessions before re-activating agents to avoid 409 errors. Ensure the current API key is provided when updating keys via the Web UI. Be aware that AgentCore ambiguous identities now generate hashed IDs.
The Two Releases
v0.4.10
v0.4.10
Oct 17, 2026· 5 days ago
Minimal release notes: "**Full Changelog**: https://github.com/NandhaKishorM/laya/compare/v0.4.9...v0.4.10"
Full release notes