Data Science Agent v4.3.0 — Adoption, Verifiable Evaluation & Project Reliability

Data Science Agent v4.3.0

Adoption, Verifiable Evaluation & Project Reliability

This release strengthens Data Science Agent as a verifiable, reproducible AI data-science platform while preserving the Stable SDK contract.

Highlights

• Auditable real-model execution with explicit provider/model provenance
• Four controlled evaluation paths:
  • full DSA
  • DSA without the evidence critic
  • vanilla LLM + tools
  • LLM-only control
• Publication-integrity validation for real-model artifacts
• Secure credentialed four-way smoke workflow
• Stronger contributor and adoption paths
• Windows quickstart and benchmark contribution workflow
• Flagship case studies and improved project discovery
• Hardened web runtime and dependency/security gates
• Clean-wheel installation and CLI/SDK release verification
• API and Web Docker verification
• Deterministic release evidence and SBOMs

Verification

The final release commit passed:

• full pytest suite
• Ruff lint and formatting
• mypy
• npm high-severity audit
• CodeQL for Python and JavaScript
• secret scanning / gitleaks
• wheel + sdist build
• clean-environment wheel installation
• public SDK import/version smoke
• installed dsa --help
• API and Web Docker builds
• container CLI smoke
• Next.js production build
• Docker Compose validation
• MkDocs strict build

The release-candidate SonarQube Quality Gate passed with no security hotspots.

Reporting boundary

v4.3.0 provides the machinery for controlled real-model comparisons, but it does not publish or imply comparative real-model benchmark scores without reviewed credentialed artifacts.

The deterministic/stub benchmark remains harness validation, not evidence of real-model quality.

Python 3.12+ remains the supported baseline. Proposed Python 3.14 and Node 26 runtime jumps are intentionally deferred to a separate compatibility cycle.

Release date: 2026-08-30

What's Changed

📚 Documentation

• docs: sharpen positioning and benchmark credibility by @Jackxiaozhiren in #14
• feat: make the web app ready for a hosted demo by @Jackxiaozhiren in #18
• feat: add explicit real-model LLM planning and benchmark provenance by @Jackxiaozhiren in #19
• docs: surface demo and real-model evaluation by @Jackxiaozhiren in #34
• eval: add reproducible evidence-critic ablation by @Jackxiaozhiren in #36
• eval: add reproducible LLM baseline runners by @Jackxiaozhiren in #38
• eval: add secure four-way real-model smoke workflow by @Jackxiaozhiren in #39
• docs: surface flagship case studies near the demo by @Jackxiaozhiren in #41
• docs: add verified Windows PowerShell quickstart by @Jackxiaozhiren in #42
• docs: add benchmark task contribution walkthrough by @Jackxiaozhiren in #43
• docs: add executable hello-world plugin walkthrough by @Jackxiaozhiren in #44
• eval: add four-way artifact publication validator by @Jackxiaozhiren in #40
• release: prepare v4.3.0 rc1 by @Jackxiaozhiren in #48
• release: prepare v4.3.0 candidate by @Jackxiaozhiren in #47

🔐 Security & Dependencies

• fix(web): patch Next.js and Sharp security vulnerabilities by @Jackxiaozhiren in #20
• security(web): move to fully patched Next 16 runtime by @Jackxiaozhiren in #30
• chore: sync root npm workspace lock by @Jackxiaozhiren in #35

Other Changes

• ci: prevent contributor workflow notification storms by @Jackxiaozhiren in #11
• ci: deduplicate branch and pull-request CI runs by @Jackxiaozhiren in #12
• test: align v4.3.0 release-candidate ref check by @Jackxiaozhiren in #49

New Contributors

• @Jackxiaozhiren made their first contribution in #11

Full Changelog: v4.2.10...v4.3.0