[dependabot]

Bumps agents from 0.17.4 to 0.32.0.

Release notes

Sourced from agents's releases.

agents@0.32.0

Minor Changes

• #2752 34cbd30 Thanks @​mattzcarey! - Add experimental_registerOpenTelemetry() to agents/observability, which records spans from OpenTelemetry-instrumented libraries as Workers trace spans. Experimental and subject to change.

• #2771 54ae3e8 Thanks @​mattzcarey! - Breaking: agents/skills now loads Agent Skills from Computer Workspace files (workspace()), R2 (r2()), or code (manifest()), checks SKILL.md against the Agent Skills spec, and replaces SkillRegistry with loadSkillCatalog() and createSkillTools() (from agents/skills/tools/ai-sdk); parseSkill() follows the spec's guide for agents, loading skills that break a rule with warnings; runner() moved to agents/skills/runner; the agents:skills Vite import and agents/skills/compile are removed. See Agent Skills.

Patch Changes

• #2763 df85805 Thanks @​mattzcarey! - Agents SDK spans (agent lifecycle, wrapAISDK, Think) now set span status error on failure, where the Workers runtime supports Span.setStatus(); attributes are unchanged. See Observability.

• #2737 08747d9 Thanks @​mattzcarey! - Mark the package side-effect free (apart from the CLI), so bundlers drop the modules a Worker doesn't use. import { routeAgentRequest } from "agents" no longer bundles the MCP client.

• #2744 a2d371e Thanks @​mattzcarey! - Update @modelcontextprotocol/client and @modelcontextprotocol/server to 2.4.0 and @modelcontextprotocol/sdk to 1.32.2, and add a clientMetadataUrl option to DurableObjectOAuthClientProvider for OAuth Client ID Metadata Documents. See MCP client.

• #2740 8cf6da1 Thanks @​mattzcarey! - agents/models/pi-ai parses streamed chat-completions tool-call arguments incrementally, instead of re-parsing the whole argument text on every delta.

• #2766 b372289 Thanks @​github-actions! - Allow @tanstack/ai 1.x in the optional peer dependency ranges, and type the TanStack AI tools so they compile against both 0.x and 1.x. See TanStack AI.

agents@0.31.0

This release adds internal hostnames to the browser. Give a Browser Run browser hostnames such as preview.internal, and its requests to them go to your agent instead of the internet, so the model can open a dev server, a workspace folder or another Worker in the same browser it uses for the web.

Highlights

• Internal hostnames: pass up to 8 hostnames to browserRun() as internalHosts. Serve each one from a fetch function on your agent or from another Worker. See Internal hostnames.
• Hosts the model points: give a host a target schema, and the model chooses what it serves with browser.assignHost(), such as a container port or a folder in its workspace. Without a target, a host always serves the same thing.
• Lighter installs without MCP servers: @modelcontextprotocol/sdk and @modelcontextprotocol/server are now optional peer dependencies, so apps that don't serve MCP no longer install them.
• Stable models: agents/models/ai-sdk and agents/models/pi-ai are no longer experimental. See Models.
• Other changes: createMcpHandler passes the verified token from @cloudflare/workers-oauth-provider 1.x to tool callbacks as context.http.authInfo. createAI from agents/models/pi-ai sends pi-ai's Anthropic betas for catalog Claude models. PiWhenBusy accepts "reject".
• browserTool improvements: the model's code runs in its own Dynamic Worker instead of on codemode, and is stopped from outside that Worker if it overruns its timeout. It can no longer close the browser or create a Live View link. this.browser.session() lets your own code drive the same browser. createBrowserTools, createBrowserRuntime, BrowserConnector and the Quick Action helpers are deprecated in favour of browserTool.

Upgrading

You only need to make changes if you serve MCP or use browserTool.

If you serve MCP or use agents/x402 or agents/experimental/webmcp:

1. Add the MCP packages to your package.json at the versions this release expects, since your package manager no longer installs them. Until you do, builds fail with an unresolved import.

   • agents/mcp (McpAgent, WorkerTransport, createLegacyMcpHandler) and agents/x402: @modelcontextprotocol/sdk@1.32.1 and @modelcontextprotocol/server@2.3.1
   • agents/mcp/server (createMcpHandler): @modelcontextprotocol/server@2.3.1
   • agents/experimental/webmcp: @modelcontextprotocol/sdk@1.32.1

   See Upgrading an existing McpAgent server.

2. Import client helpers such as RPCClientTransport from agents/mcp/client instead of agents/mcp. MCP client code needs neither package.

If you use browserTool:

1. Remove the CodemodeRuntime export from your Worker unless createBrowserTools still uses it, and remove ctx from browserTool's options. Keep the LOADER binding and keep @cloudflare/codemode installed for now.

... (truncated)

Changelog

Sourced from agents's changelog.

0.32.0

Minor Changes

• #2752 34cbd30 Thanks @​mattzcarey! - Add experimental_registerOpenTelemetry() to agents/observability, which records spans from OpenTelemetry-instrumented libraries as Workers trace spans. Experimental and subject to change.

• #2771 54ae3e8 Thanks @​mattzcarey! - Breaking: agents/skills now loads Agent Skills from Computer Workspace files (workspace()), R2 (r2()), or code (manifest()), checks SKILL.md against the Agent Skills spec, and replaces SkillRegistry with loadSkillCatalog() and createSkillTools() (from agents/skills/tools/ai-sdk); parseSkill() follows the spec's guide for agents, loading skills that break a rule with warnings; runner() moved to agents/skills/runner; the agents:skills Vite import and agents/skills/compile are removed. See Agent Skills.

Patch Changes

• #2763 df85805 Thanks @​mattzcarey! - Agents SDK spans (agent lifecycle, wrapAISDK, Think) now set span status error on failure, where the Workers runtime supports Span.setStatus(); attributes are unchanged. See Observability.

• #2737 08747d9 Thanks @​mattzcarey! - Mark the package side-effect free (apart from the CLI), so bundlers drop the modules a Worker doesn't use. import { routeAgentRequest } from "agents" no longer bundles the MCP client.

• #2744 a2d371e Thanks @​mattzcarey! - Update @modelcontextprotocol/client and @modelcontextprotocol/server to 2.4.0 and @modelcontextprotocol/sdk to 1.32.2, and add a clientMetadataUrl option to DurableObjectOAuthClientProvider for OAuth Client ID Metadata Documents. See MCP client.

• #2740 8cf6da1 Thanks @​mattzcarey! - agents/models/pi-ai parses streamed chat-completions tool-call arguments incrementally, instead of re-parsing the whole argument text on every delta.

• #2766 b372289 Thanks @​github-actions! - Allow @tanstack/ai 1.x in the optional peer dependency ranges, and type the TanStack AI tools so they compile against both 0.x and 1.x. See TanStack AI.

0.31.0

This release adds internal hostnames to the browser. Give a Browser Run browser hostnames such as preview.internal, and its requests to them go to your agent instead of the internet, so the model can open a dev server, a workspace folder or another Worker in the same browser it uses for the web.

Highlights

• Internal hostnames: pass up to 8 hostnames to browserRun() as internalHosts. Serve each one from a fetch function on your agent or from another Worker. See Internal hostnames.
• Hosts the model points: give a host a target schema, and the model chooses what it serves with browser.assignHost(), such as a container port or a folder in its workspace. Without a target, a host always serves the same thing.
• Lighter installs without MCP servers: @modelcontextprotocol/sdk and @modelcontextprotocol/server are now optional peer dependencies, so apps that don't serve MCP no longer install them.
• Stable models: agents/models/ai-sdk and agents/models/pi-ai are no longer experimental. See Models.
• Other changes: createMcpHandler passes the verified token from @cloudflare/workers-oauth-provider 1.x to tool callbacks as context.http.authInfo. createAI from agents/models/pi-ai sends pi-ai's Anthropic betas for catalog Claude models. PiWhenBusy accepts "reject".
• browserTool improvements: the model's code runs in its own Dynamic Worker instead of on codemode, and is stopped from outside that Worker if it overruns its timeout. It can no longer close the browser or create a Live View link. this.browser.session() lets your own code drive the same browser. createBrowserTools, createBrowserRuntime, BrowserConnector and the Quick Action helpers are deprecated in favour of browserTool.

Upgrading

You only need to make changes if you serve MCP or use browserTool.

If you serve MCP or use agents/x402 or agents/experimental/webmcp:

1. Add the MCP packages to your package.json at the versions this release expects, since your package manager no longer installs them. Until you do, builds fail with an unresolved import.

   • agents/mcp (McpAgent, WorkerTransport, createLegacyMcpHandler) and agents/x402: @modelcontextprotocol/sdk@1.32.1 and @modelcontextprotocol/server@2.3.1
   • agents/mcp/server (createMcpHandler): @modelcontextprotocol/server@2.3.1
   • agents/experimental/webmcp: @modelcontextprotocol/sdk@1.32.1

   See Upgrading an existing McpAgent server.

2. Import client helpers such as RPCClientTransport from agents/mcp/client instead of agents/mcp. MCP client code needs neither package.

If you use browserTool:

... (truncated)

Commits

• be17492 Version Packages (#2746)
• 3832749 Revert "fix(agents): upgrade opencode to 2.2.1 (#2767)" (#2775)
• 5cfafcf fix(agents): upgrade opencode to 2.2.1 (#2767)
• 54ae3e8 feat(skills): load Agent Skills from Workspace files, R2, or a manifest (#2771)
• b372289 Allow @​tanstack/ai 1.x in agents and codemode peer ranges (#2766)
• 08747d9 perf(agents): mark the package side-effect free so Workers drop unused module...
• 8cf6da1 perf(models/pi-ai): parse streamed tool-call arguments incrementally (#2740)
• df85805 feat(observability): set error status on failed Agents SDK spans (#2763)
• 34cbd30 feat(observability): experimental_registerOpenTelemetry() bridges the OpenTel...
• d69277b chore: typecheck with tsrs instead of tsgo (#2757)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #42.