agents@0.24.0 @cloudflare/worker-bundler@0.2.4
tulir/whatsmeowSep 18, 2026 → Sep 18, 20260 days between releases
What's New
Older release adds State/Queue capabilities and Cap'n Web transport; newer release updates smol-toml to fix a high-severity DoS vulnerability.
Breaking Changes
- Experimental `?__agents_rpc=capnweb` endpoint removed
- `LifecycleServices.starting()` replaced by `status()`
- `queue()` methods are now asynchronous
- `QueueItem.created_at` renamed to `createdAt`
- Legacy `cf_agents_queues` table and in-isolate drain removed
New Features
- New `State` capability for validated, persistent agent state management
- New `Queue` capability for durable background job processing with retry policies
- `useAgent({ transport })` and `AgentClient({ transport })` support for different wire protocols
- `Queue` supports stable IDs, per-item retry, and deadman timers
Improvements
- WebSockets capability now owns protocol state sync and connection flags
- LifecycleServices exposes `name` and `className`
- WebSocket gains Cap'n Web transport for native callables and streaming
Bug Fixes
- Fixes a high-severity denial of service via malformed TOML
Upgrade Notes
Note: The provided releases are for different packages (`agents` and `worker-bundler`), so there is no direct upgrade path. For the older release, update `LifecycleServices` to use `status()` and migrate the `cf_agents_queues` table.
The Two Releases
agents@0.24.0
Sep 18, 2026· 1 month ago
This minor release introduces significant architectural changes including a new `State` and `Queue` Lifecycle capability, enhanced WebSocket support with Cap'n Web transport, and improved protocol handling for Durable Objects.
Full release notes@cloudflare/worker-bundler@0.2.4
Sep 18, 2026· 1 month ago
This patch release updates the dependency `smol-toml` to version 1.7.2 or higher to address a high-severity denial-of-service vulnerability caused by malformed TOML parsing.
Full release notes