composio version history

- Fixed URL uploads and telemetry in Python - Added CLI installer for plugins, including Claude and Codex - Migrated AutoGen examples to new LLMConfig API - Improved CI validation for Python releases

- Fixed API reference URLs and documentation issues - Added new executable examples including Mastra and Eve providers - Improved security with SSRF guard and telemetry redaction - Added CLI `--no-browser` flag for link command

- Fixed misclassification of local paths starting with "http" as URLs - Replaced abandoned decompress dependency to address security vulnerability

## What's Changed * test: add unit tests for the mimetypes utility by @eeshsaxena in https://github.com/ComposioHQ/composio/pull/3750 * chore(cli): remove dead duplicate maybe-advice-spans-usage file by @anxkhn in https://github.com/ComposioHQ/composio/pull/3757 ## New Contributors * @eeshsaxena made their first contribution in https://github.com/ComposioHQ/composio/pull/3750 **Full Changelog**: https://github.com/ComposioHQ/composio/compare/@composio/cli@0.2.32-beta.284...@composio/cli@0.2.32-beta.285

- Fixed CLI install URL to point at the next branch

## What's Changed * fix(sdk): resolve toolkit versions case-insensitively in both SDKs by @jkomyno in https://github.com/ComposioHQ/composio/pull/3762 * fix(cli): enforce sensitive-file upload denylist (GHSA-hp3h-89pf-5q58) by @jkomyno in https://github.com/ComposioHQ/composio/pull/3763 **Full Changelog**: https://github.com/ComposioHQ/composio/compare/@composio/cli@0.2.32-beta.282...@composio/cli@0.2.32-beta.283

## What's Changed * chore(deps): resolve high prod audit advisories via in-range bumps by @jkomyno in https://github.com/ComposioHQ/composio/pull/3751 * chore(ci): add least-privilege tokens, fork-pr guards, audit gate by @jkomyno in https://github.com/ComposioHQ/composio/pull/3748 * chore(deps): consolidate dependency updates by @jkomyno in https://github.com/ComposioHQ/composio/pull/3760 **Full Changelog**: https://github.com/ComposioHQ/composio/compare/@composio/cli@0.2.32-beta.281...@composio/cli@0.2.32-beta.282

## What's Changed * docs: update Python SDK reference from source by @sdkrelease[bot] in https://github.com/ComposioHQ/composio/pull/3703 * docs: refresh OpenAPI reference by @abhishekpatil4 in https://github.com/ComposioHQ/composio/pull/3699 * fix(core): disable retries on non-idempotent `tools.execute`/`proxyExecute` by @jkomyno in https://github.com/ComposioHQ/composio/pull/3716 * feat(triggers): resolve connection from user_id server-side in create() by @anshugarg15 in https://github.com/ComposioHQ/composio/pull/3714 * fix(py): handle 4+ option and typeless anyOf/oneOf unions in tool signatures by @anxkhn in https://github.com/ComposioHQ/composio/pull/3708 * fix(py): handle typeless and empty combiner schemas in openapi signatures by @anxkhn in https://github.com/ComposioHQ/composio/pull/3710 * fix(triggers): align create() user_id resolution across SDKs by @jkomyno in https://github.com/ComposioHQ/composio/pull/3723 * docs: update guides for SDK changes by @sdkrelease[bot] in https://github.com/ComposioHQ/composio/pull/3724 * fix(core): run all parallel OpenAI tool calls from the first choice by @jkomyno in https://github.com/ComposioHQ/composio/pull/3726 * fix(py): migrate co

## What's Changed * chore(deps): roll up dependency bumps by @jkomyno in https://github.com/ComposioHQ/composio/pull/3711 **Full Changelog**: https://github.com/ComposioHQ/composio/compare/@composio/cli@0.2.32-beta.279...@composio/cli@0.2.32-beta.280

## What's Changed * feat(py): add tool router session deletion by @jkomyno in https://github.com/ComposioHQ/composio/pull/3700 * chore(ci): use GitHub App client ID input by @jkomyno in https://github.com/ComposioHQ/composio/pull/3707 * fix(docs): use app token for SDK docs sync PRs by @jkomyno in https://github.com/ComposioHQ/composio/pull/3706 * docs: document session delete() and realign docs @composio/* deps by @jkomyno in https://github.com/ComposioHQ/composio/pull/3705 * ci(docs): keep docs @composio/* deps current on each SDK sync by @jkomyno in https://github.com/ComposioHQ/composio/pull/3709 * chore(deps): bump the github-actions group across 1 directory with 7 updates by @dependabot[bot] in https://github.com/ComposioHQ/composio/pull/3694 **Full Changelog**: https://github.com/ComposioHQ/composio/compare/@composio/slim@0.13.1...@composio/cli@0.2.32-beta.279

## What's Changed * docs: update TypeScript SDK reference from source by @sdkrelease[bot] in https://github.com/ComposioHQ/composio/pull/3685 * chore(agents): normalize repo guidance skills by @jkomyno in https://github.com/ComposioHQ/composio/pull/3666 **Full Changelog**: https://github.com/ComposioHQ/composio/compare/@composio/cli@0.2.32-beta.277...@composio/cli@0.2.32-beta.278

### Minor Changes - 9ffc696: Add AI SDK 7 support to `@composio/vercel`. The `ai` peer dependency range is now `^6.0.0 || ^7.0.0` (AI SDK 5 is no longer supported; both v6 and v7 are covered by e2e compatibility tests).

### Patch Changes - cddd66c: Update the supported `@mastra/core` peer dependency range.

### Patch Changes - 605a726: Add Tool Router session deletion APIs.

## What's Changed * fix(py): normalize generated SDK doc examples by @jkomyno in https://github.com/ComposioHQ/composio/pull/3689 * chore(ts): bump Hono, Mastra, and Chrome deps by @jkomyno in https://github.com/ComposioHQ/composio/pull/3691 **Full Changelog**: https://github.com/ComposioHQ/composio/compare/@composio/cli@0.2.32-beta.276...@composio/cli@0.2.32-beta.277

### Minor Changes - d17a268: Add the first-class `composio.sessions.create()` API while keeping `composio.create()` as an alias, expose the experimental shared-connection ACL patch helper as `connectedAccounts.updateAcl()` while keeping `experimental.updateAcl()` as an alias, and include SDK docs/source in the published package. **MCP is now opt-in.** Sessions return native tools by default; the hosted MCP endpoint is only surfaced on the type when you create the session with `{ mcp: true }`. The default `create()` / `use()` now return `SessionWithoutMcp` (the runtime object is unchanged — `session.mcp` still exists at runtime — but it is no longer in the type). Migration: read `session.mcp` only after creating with `{ mcp: true }`. - d17a268: Surface the resolved workbench config on Tool Router sessions. - `Session.workbench` is now populated from the API response (on create/retrieve/attach/update). It exposes the resolved workbench config, e.g. `session.workbench?.enable` (defaults to `true` server-side). This lets callers create a session with the remote workbench disabled (`workbench: { enable: false }`) and detect that state — the foundation for running code in a