Skip to content

2.1.776

Choose a tag to compare

View all tags
@arthur-louisa arthur-louisa released this 05 Aug 20:05
· 271 commits to dev since this release
2.1.776
5d3c356
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

馃殌 Arthur Engine Release

August 5, 2026

This release introduces a new source trace drawer for streamlined trace investigation, alongside a broad set of dependency modernizations and hardened CI/CD automation鈥攊ncluding proactive supply-chain defenses.

Trace Investigation

Source Trace Drawer

  • Added a source trace drawer component that displays linked traces directly within dataset and experiment views, so users can inspect related trace information in a side panel without navigating away (#1999)

This new drawer keeps investigators in context, making it faster and easier to explore relationships between linked traces during evaluation workflows.

Model & Client Integrations

OpenAI

  • Updated the OpenAI Python client to v2.49.0, which raises the minimum supported version to Python 3.10 (#2085)
  • Updated the OpenAI Python client to v2.50.0, bringing transcription model updates and restoring the previously missing transcription keyword overload (#2102)

Observability

  • Updated langsmith to v0.10.11 with upstream fixes and routine maintenance (#2094)

These updates give users access to the latest transcription capabilities and keep observability tooling current.

Platform & Runtime

Server & Runtime

  • Updated the gunicorn server dependency from v23 to v26, adding HTTP/1.1 request validation, request-smuggling hardening per RFC 9110/9112, and expanded ASGI compatibility鈥攏ote the eventlet worker has been removed and requires migration to gevent, gthread, or tornado (#2087)
  • Updated the Node.js base image from v20-alpine to v24-alpine ('Krypton' LTS), delivering performance improvements, new crypto algorithms, and enhanced HTTP capabilities (#2062)
  • Updated cachetools to v7, including a fix for TLRUCache retaining stale values on expired overwrites, improved type stubs, and other enhancements (#2069)

Backend Dependencies

  • Updated Python minor and patch dependencies including FastAPI, Pydantic, and litellm, with compatibility fixes for FastAPI 0.140 and resolved importlib-metadata constraints (#2064)

These updates strengthen HTTP security, modernize the runtime, and improve backend compatibility and performance.

Frontend & Animation

Animation Library

  • Replaced the framer-motion dependency with motion, the recommended drop-in successor package from the same maintainer, preserving full animation compatibility (#1912)
  • Updated motion to v12.43.0, adding hardware acceleration for backgroundColor and SVG elements and fixing an AnimatePresence regression that caused exiting children to remount when new children were present (#2093)

Frontend Dependencies

  • Updated npm minor and patch dependencies including TanStack Query, @types/node, dayjs, and eslint-plugin-react-refresh (#2066)
  • Updated npm minor and patch dependencies for @amplitude analytics and session-replay packages (#2100)

Frontend users benefit from improved animation performance and up-to-date tooling with no change to existing behavior.

CI/CD & Automation

Renovate & Dependency Management

  • Paused Renovate auto-merge for non-major updates as a precaution during the active keyv/Shai-Hulud npm supply-chain campaign, requiring manual review before merges (#2104)
  • Routed major dependency bumps to the appropriate domain experts for review based on category鈥攆rontend, backend, and infra (#2099)
  • Labeled soak-blocked Renovate PRs with blocked: release-age soak and a detailed comment, making timing-hold issues immediately visible and filterable (#2095)
  • Added Renovate rules to resolve dependency conflicts by capping transformers to satisfy gliner's constraint and grouping the fsspec filesystem family for coordinated updates (#2089)

Workflow Reliability & Safety

  • Fixed the Renovate auto-fix workflow's git push authentication by explicitly passing the Automator App token, unblocking automated code fixes (#2077)
  • Fixed an auto-fix approval race condition by pinning approvals to the exact post-push commit SHA, and flagged major-version updates for human review instead of auto-merge (#2088)
  • Scoped release and publish jobs to the canonical repository across 14 CI jobs, preventing accidental deployments or artifact pushes from forks (#2084)

These automation improvements make dependency management safer and more reliable while adding defensive measures against emerging supply-chain threats.

Documentation

Internal Guidelines

  • Simplified and reorganized CLAUDE.md files across the repository to align with updated context engineering guidelines, removing obsolete AGENTS.md files (#1997)

These documentation updates streamline internal contributor guidance with no user-facing impact.

Release Coordination

  • Production release trigger incrementing the arthur-engine version and merging accumulated dependency, security, and CI/CD improvements (#2081)
  • Production release trigger merging accumulated dev-branch changes into main, including the source trace drawer and dependency updates (#2107)

These internal release PRs coordinate the production build and deployment pipeline.

Release notes generated by Louisa

Contributors

amplitude
Assets 2
Loading