chore(main): release 0.2.0

[github-actions]

🤖 I have created a release beep boop

0.2.0 (2026-07-15)

Features

• agent_api_keys: one-call webhook-trigger setup endpoint (#329) (9cc71fb)
• agentex-ui: account picker via same-origin BFF proxy (#350) (0f07dc7)
• agentex-ui: grow chat input vertically for multi-line prompts (#332) (8c060f1)
• agentex-ui: OIDC login with server-side access token (#351) (824286c)
• agentex: forward OIDC bearer credential for user delegation (#363) (cea5963)
• retention: strict bool env parsing + stale-RUNNING cleanup override (#306) (5ad81e8)
• schedules: add exact skip and unskip actions (#357) (ac88134)
• schedules: agent run schedules (v1) (#335) (6a66ad3)
• task-messages: add optional is_error to ToolResponseContent (#331) (5020e96)
• update task configs in agentex db on turn (#309) (13eea7a)

Bug Fixes

• agentex-ui: bump postcss to >=8.5.10 (CVE-2026-41305) (#360) (8e5159b)
• agentex-ui: bump tar 7.5.11 -> 7.5.16 (CVE-2026-53655) (#361) (f8e64a1)
• agentex-ui: bump uuid 11.1.0 -> 11.1.1 (CVE-2026-41907) (#362) (9edebf5)
• agentex-ui: merge URL updates against the live URL to fix account-switch races (#355) (f87e363)
• agentex-ui: stop clipping agent badge hover scale and shadow (#352) (b49fab6)
• agentex: bump aiohttp 3.13.4 -> 3.14.1 (clears 11 CVEs, agentex server image) (#359) (3001351)
• authz: grant legacy agent register principal (#325) (cae5f94)
• deps: cap fastapi <0.137.0 to stop OPTIONS preflight 500s (#334) (acbe9e3)
• deps: clear golden-image Trivy CRITICAL/HIGH (litellm, starlette, pyjwt, python-multipart) (#320) (bfa6652)
• page ready agents during health-check startup (#345) (2ffde24)
• schedules: backfill agent_run_schedules deleted_at/version on early-deployed envs (#341) (fc1ba55)
• schedules: grant legacy auth for run schedules (#344) (648e81c)
• schedules: use stable handles for run schedules (#349) (3b722f6)
• streams: cut SSE error-log volume and add Redis pool headroom (#340) (352eaaa)
• streams: snapshot SSE cursor before "connected" to stop first-token drops (#330) (7c2ccfd)
• tasks: preserve task_metadata in combined update and forward merge_params by name (#336) (8c25c64)
• ui: load all agents so the picker and deep-links work past the first page (#347) (92b9da3)

Documentation

• document Redis as a required dependency (#343) (4c1740b)
• guides: tracing, framework-agent, and local-sandbox guides (#339) (b43e8c3)
• streaming: document the unified harness surface (#337) (31fd697)

---

This PR was generated with Release Please. See documentation.

Greptile Summary

This is an automated Release Please PR that bumps all workspace packages from 0.1.0 to 0.2.0 and generates the initial CHANGELOG.md. The six changed files are purely version metadata and the regenerated OpenAPI spec — no application logic is modified here.

• Version files (.release-please-manifest.json, pyproject.toml, agentex/pyproject.toml, agentex/src/_version.py): all consistently set to 0.2.0.
• CHANGELOG.md: new file cataloguing the full set of features, bug fixes, and docs shipped in this milestone (schedules, OIDC delegation, SSE fixes, CVE patches, etc.).
• agentex/openapi.yaml: regenerated API spec at version 0.2.0, reflecting the new schedule, agent-key, and OIDC endpoints added during the milestone.

Confidence Score: 5/5

Safe to merge — all changes are version-metadata and generated artifacts produced by Release Please automation.

Every changed file is either a version string, the auto-generated CHANGELOG, or the regenerated OpenAPI spec. No application logic, migrations, or runtime behaviour is touched in this PR.

No files require special attention.

Important Files Changed

Filename	Overview
.release-please-manifest.json	Version bumped from 0.1.0 to 0.2.0; correct and consistent with all other files.
CHANGELOG.md	New file generated by Release Please listing all features, bug fixes, and docs from the 0.2.0 milestone.
agentex/openapi.yaml	API spec version updated to 0.2.0; includes new schedule, agent key, and OIDC endpoints added across the milestone.
agentex/pyproject.toml	Package version bumped to 0.2.0; dependency floors reflect CVE patches referenced in the release notes.
agentex/src/_version.py	Single-source version string bumped to 0.2.0 by release-please automation.
pyproject.toml	Workspace root version bumped to 0.2.0; override-dependencies correctly floor aiohttp at 3.14.1 and fastapi below the broken 0.137.x line.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Release Please Bot] --> B[Bump versions to 0.2.0]
    B --> C[.release-please-manifest.json]
    B --> D[pyproject.toml root]
    B --> E[agentex/pyproject.toml]
    B --> F[agentex/src/_version.py]
    B --> G[CHANGELOG.md generated]
    B --> H[agentex/openapi.yaml regenerated]
    H --> I[New schedule endpoints]
    H --> J[New agent API key endpoints]
    H --> K[OIDC / bearer delegation endpoints]

Loading

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[Release Please Bot] --> B[Bump versions to 0.2.0]
    B --> C[.release-please-manifest.json]
    B --> D[pyproject.toml root]
    B --> E[agentex/pyproject.toml]
    B --> F[agentex/src/_version.py]
    B --> G[CHANGELOG.md generated]
    B --> H[agentex/openapi.yaml regenerated]
    H --> I[New schedule endpoints]
    H --> J[New agent API key endpoints]
    H --> K[OIDC / bearer delegation endpoints]

Loading

_{Reviews (28): Last reviewed commit: "chore(main): release 0.2.0" | Re-trigger Greptile}

[greptile-apps]

Regenerate the lockfile

The package versions were bumped here and in agentex/pyproject.toml, but uv.lock still records both workspace packages as 0.1.0 (agentex and agentex-backend). The Docker build copies that lockfile and runs uv sync --frozen --no-dev --package agentex-backend and uv export --frozen, so the release image path can fail the frozen-lock freshness check or install/export package metadata from the previous version. Regenerate and commit uv.lock with the 0.1.1 package versions.

Artifacts

Repro: lock metadata check script

• Contains supporting evidence from the run (text/x-python; charset=utf-8).

Repro: lock metadata check output showing stale package versions

• Keeps the command output available without making the summary code-heavy.

Repro: attempted frozen uv sync command output

• Keeps the command output available without making the summary code-heavy.

Repro: attempted frozen uv export command output

• Keeps the command output available without making the summary code-heavy.

_{Ran code and verified through T-Rex}

Prompt To Fix With AI

This is a comment left during a code review.
Path: pyproject.toml
Line: 3

Comment:
**Regenerate the lockfile**

The package versions were bumped here and in `agentex/pyproject.toml`, but `uv.lock` still records both workspace packages as `0.1.0` (`agentex` and `agentex-backend`). The Docker build copies that lockfile and runs `uv sync --frozen --no-dev --package agentex-backend` and `uv export --frozen`, so the release image path can fail the frozen-lock freshness check or install/export package metadata from the previous version. Regenerate and commit `uv.lock` with the `0.1.1` package versions.

How can I resolve this? If you propose a fix, please make it concise.

[github-actions]

✱ Stainless preview builds

This PR will update the agentex-sdk SDKs with the following commit messages.

openapi

chore(main): release 0.2.0

python

chore(main): release 0.2.0

typescript

chore(internal): regenerate SDK with no functional changes

Edit this comment to update them. They will appear in their respective SDK's changelogs.

✅ agentex-sdk-openapi studio · code · diff

Your SDK build had at least one "note" diagnostic, but this did not represent a regression.
generate ✅

✅ agentex-sdk-typescript studio · code · diff

Your SDK build had at least one "warning" diagnostic, but this did not represent a regression.
generate ⚠️ → build ⏭️ (prev: build ✅) → lint ⏭️ (prev: lint ✅) → test ✅

⚡ agentex-sdk-python studio · conflict

Your SDK build resulted in a merge conflict between your custom code and the newly generated changes, which is a regression from the base state.
You don't need to resolve this conflict right now, but you will need to resolve it for your changes to be released to your users. Read more about why this happened here.

---

This comment is auto-generated by GitHub Actions and is automatically kept up to date as you push.
If you push custom code to the preview branch, re-run this workflow to update the comment.
Last updated: 2026-06-25 18:06:43 UTC

[greptile-apps]

Regenerate frozen lockfile

This release bumps the workspace package to 0.2.0, but uv.lock still records both agentex and agentex-backend as 0.1.0. The Docker image copies that lockfile and runs frozen uv export / uv sync for agentex-backend, so the release build can fail the frozen-lock check or install/export package metadata for the previous version instead of this release.

Artifacts

Repro: generated frozen uv check script

• Contains supporting evidence from the run (text/x-shellscript; charset=utf-8).

Repro: frozen uv command output showing stale lockfile validation failure

• Keeps the command output available without making the summary code-heavy.

Repro: uv 0.7.3 installation output used to run the frozen checks

• Keeps the command output available without making the summary code-heavy.

_{Ran code and verified through T-Rex}

Prompt To Fix With AI

This is a comment left during a code review.
Path: pyproject.toml
Line: 3

Comment:
**Regenerate frozen lockfile**

This release bumps the workspace package to `0.2.0`, but `uv.lock` still records both `agentex` and `agentex-backend` as `0.1.0`. The Docker image copies that lockfile and runs frozen `uv export` / `uv sync` for `agentex-backend`, so the release build can fail the frozen-lock check or install/export package metadata for the previous version instead of this release.

How can I resolve this? If you propose a fix, please make it concise.

[greptile-apps]

Update telemetry version defaults

The API version now comes from __version__ and is 0.2.0, but src/utils/otel_metrics.py still falls back to SERVICE_VERSION 0.1.0 and get_meter(..., version="0.1.0"). Internal callers use get_meter without passing a version, so deployments that do not set SERVICE_VERSION emit 0.2.0 service metrics under the old 0.1.0 version, which can make rollout dashboards and version comparisons incorrect.

Artifacts

Repro: Python harness that exercises telemetry version defaults with SERVICE_VERSION unset

• Contains supporting evidence from the run (text/x-python; charset=utf-8).

Repro: harness output showing package version 0.2.0 but telemetry resource and meter version 0.1.0

• Keeps the command output available without making the summary code-heavy.

_{Ran code and verified through T-Rex}

Prompt To Fix With AI

This is a comment left during a code review.
Path: agentex/src/_version.py
Line: 3

Comment:
**Update telemetry version defaults**

The API version now comes from `__version__` and is `0.2.0`, but `src/utils/otel_metrics.py` still falls back to `SERVICE_VERSION` `0.1.0` and `get_meter(..., version="0.1.0")`. Internal callers use `get_meter` without passing a version, so deployments that do not set `SERVICE_VERSION` emit 0.2.0 service metrics under the old 0.1.0 version, which can make rollout dashboards and version comparisons incorrect.

How can I resolve this? If you propose a fix, please make it concise.