deepagents-code 0.1.67 hardens per-workspace isolation after project policy and dotenv leaked across workspace switches

GitHub Releases·low signalXBlueskyLinkedInCopy link

LangChain shipped deepagents-code 0.1.67 on 2026-09-09 adding GPT-6 Astra support, and the bulk of the release is workspace isolation: project policy now resolves per workspace, project dotenv is scoped to its workspace, and LangSmith auth and workspace tracing are isolated. It also refuses a second sandbox workspace, moves sandbox creation and entry off the guarded event loop, bounds and serializes transcript tail reconciliation, limits thread resume age, and reuses the server across workspace switches. Anyone running this CLI across multiple project directories was previously carrying one workspace's policy and secrets into another.