v1.66.0

CopilotKit v1.66.0

A minor release opening the 1.66 line — but for the 16 monorepo packages it is effectively a security patch: @a2ui/web_core is bumped 0.9.0 → 0.10.4 to close the openUrl XSS advisory (CVSS 9.3) in @copilotkit/a2ui-renderer and @copilotkit/vue (#6343). The feature work in this range shipped in the separately-versioned Channels family as Channels 0.7.0.

Install

npm install @copilotkit/react-core@1.66.0 @copilotkit/react-ui@1.66.0 @copilotkit/runtime@1.66.0

Fixes

• @copilotkit/a2ui-renderer / @copilotkit/vue: @a2ui/web_core bumped to 0.10.4 for the openUrl XSS (GHSA-72qq-p3r5-f7wq) — web_core ≤ 0.10.1 passed an agent-supplied openUrl argument straight to window.open() with no scheme check, so a malicious agent could emit a Button whose functionCall named a javascript: URI and execute script in the host application's origin on click. The sink is in the default Basic Catalog, so no non-default configuration was required.
  • Both packages pinned 0.9.0 exactly (and @copilotkit/react-core reaches the sink through a2ui-renderer), so downstream apps could not upgrade out of it without an overrides entry — updating to 1.66.0 is the fix path.
  • 0.10.4 enforces a strict http/https allowlist and opens links with noopener,noreferrer. The failure mode changes: a blocked scheme now raises A2uiExpressionError — caught by web_core and routed to surface.dispatchError, so the surface stays mounted — instead of silently no-op'ing.
  • Six regression tests over the React and Lit renderers now assert that javascript:/data: URIs never reach window.open and that https URLs still open; pinned back to 0.9.0, 5 of the 6 fail. (#6343)

Dependencies

• @a2ui/web_core 0.9.0 → 0.10.4 in @copilotkit/a2ui-renderer and @copilotkit/vue (the security fix above).
• @ag-ui/* unchanged from 1.65.0 — @ag-ui/langgraph at 0.0.42, @ag-ui/a2ui-middleware at 0.0.10, @ag-ui/mcp-apps-middleware at 0.0.3, @ag-ui/mcp-middleware at 0.0.1, @ag-ui/core / @ag-ui/client / @ag-ui/encoder at 0.0.57.
• Runtime's Channels dependencies resolve to 0.7.0 — the published @copilotkit/runtime picks up @copilotkit/channels-core@^0.7.0 / @copilotkit/channels-intelligence@0.7.0 from the concurrent Channels release.

Packages republished at 1.66.0

@copilotkit/runtime, @copilotkit/react-core, @copilotkit/react-ui, @copilotkit/react-native, @copilotkit/core, @copilotkit/shared, @copilotkit/runtime-client-gql, @copilotkit/sdk-js, @copilotkit/vue, @copilotkit/voice, @copilotkit/web-inspector, @copilotkit/web-components, @copilotkit/a2ui-renderer, @copilotkit/react-textarea, @copilotkit/sqlite-runner, and @copilotkit/agentcore-runner.