v0.11.0

What's Changed

• security(python): update aiohttp and cryptography by John Kennedy (@jkennedyvz) in #3365
• security: update vulnerable JavaScript dependencies by John Kennedy (@jkennedyvz) in #3292
• Fix JS Dependabot alerts by John Kennedy (@jkennedyvz) in #3272
• fix(py): mask MCP server credentials in Anthropic wrapper traces by Emil F (@emil-lc) in #3371
• fix(js): mask MCP server credentials in Anthropic wrapper traces by Emil F (@emil-lc) in #3372
• fix(py): stop recording mcp_servers in Anthropic run metadata by Emil F (@emil-lc) in #3375
• feat(sandbox): add Context Hub mount helpers by Ramon Nogueira (@ramon-langchain) in #3351
• ci: run the full CI nightly against every environment by KiewanVillatel in #3338
• fix: default Dockerfile snapshot capacity by Ramon Nogueira (@ramon-langchain) in #3383
• fix(ci): stop uv run from resyncing the deepagent compat env by Emil F (@emil-lc) in #3397
• feat(sandbox): support proxy rule env vars in the Python and JS helpers by Ramon Nogueira (@ramon-langchain) in #3394
• perf(py): stop re-sending run inputs on patch by default by Emil F (@emil-lc) in #3396
• perf(py): default zstd compression to a single worker thread by Emil F (@emil-lc) in #3395
• perf(py): call pydantic core serializer directly, skip orjson key checks by Emil F (@emil-lc) in #3367
• release(py): 0.11.0 by Emil F (@emil-lc) in #3400

Full Changelog: v0.10.18...v0.11.0