Skip to content

chore(deps): bump bedrock-agentcore from 1.4.7 to 1.18.1 in /agent-code/agui-strands-agent - #12

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/agent-code/agui-strands-agent/bedrock-agentcore-1.18.1
Closed

chore(deps): bump bedrock-agentcore from 1.4.7 to 1.18.1 in /agent-code/agui-strands-agent#12
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/agent-code/agui-strands-agent/bedrock-agentcore-1.18.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Contributor

Bumps bedrock-agentcore from 1.4.7 to 1.18.1.

Release notes

Sourced from bedrock-agentcore's releases.

Bedrock AgentCore SDK v1.18.1

Installation

pip install bedrock-agentcore==1.18.1

What's Changed

See CHANGELOG.md for details.

What's Changed

Full Changelog: aws/bedrock-agentcore-sdk-python@v1.18.0...v1.18.1

Bedrock AgentCore SDK v1.18.0

Installation

pip install bedrock-agentcore==1.18.0

What's Changed

See CHANGELOG.md for details.

What's Changed

New Contributors

Full Changelog: aws/bedrock-agentcore-sdk-python@v1.17.0...v1.18.0

Bedrock AgentCore SDK v1.17.0

Installation

pip install bedrock-agentcore==1.17.0

... (truncated)

Changelog

Sourced from bedrock-agentcore's changelog.

[1.18.1] - 2026-07-17

Fixed

  • fix: tighten package specifier validation in install_packages() (#581) (3c4b4ee)

Other Changes

  • chore(deps): bump python-multipart from 0.0.27 to 0.0.31 (#527) (986801f)
  • chore(deps): bump soupsieve from 2.8 to 2.8.4 (#575) (1a79821)
  • chore(deps): bump cryptography from 46.0.7 to 48.0.1 (#531) (3a4361e)
  • chore(deps): bump pyjwt from 2.12.0 to 2.13.0 (#525) (8e1abcf)
  • chore(deps): bump starlette from 0.49.1 to 1.3.1 (#530) (738eb0f)

[1.18.0] - 2026-07-10

Fixed

  • fix: floor monotonic timestamps to milliseconds before comparison (#573) (f855616)
  • fix: order AgentCore Memory events at millisecond resolution (#572) (a271ab4)

Other Changes

  • ci: add API reference docs generation workflow (#569) (168f4be)
  • fix(payments): address langgraph middleware review follow-ups (#570) (46a0bea)
  • feat(payments): Add LangGraph integration for payment handling (#546) (0a8a486)

[1.17.0] - 2026-07-02

Other Changes

  • fix(runtime): prevent streaming-bridge deadlock on client disconnect (#482) (#563) (2bfabb3)
  • Revert "Create poc-caller.yml (#561)" (#562) (8bbfe18)
  • Create poc-caller.yml (#561) (df244a2)

[1.16.0] - 2026-06-30

Other Changes

  • fix(ci): prevent script injection in GitHub Actions workflows (#559) (c771470)
  • Add extraction_mode parameter to MemoryClient.create_event (#550) (22fc032)

[1.15.1] - 2026-06-25

Added

  • feat(evaluation): add KMS, tags, online data source, and updated_at to batch eval (#533) (de79b6b)
  • feat(evaluation): expose evaluationReferenceInputs on EvaluatorInput (#540) (ff55a2a)

Fixed

  • fix: use correct 'score' field for memory relevance filtering (#480) (eaaf451)
  • fix: remove invalid CLI entrypoint from pyproject.toml (#521) (e937f9a)
  • fix(evaluation): make EvaluatorOutput.label optional for error responses (#545) (1eabc67)
  • fix(memory): guard retrieve_customer_context against empty message content (#544) (56b215d)
  • fix(runtime): drop time_of_last_update from A2A and AG-UI ping responses (#542) (44b1a92)
  • fix(ci): make security review robust to shallow-clone restoration (#524) (fefb240)

... (truncated)

Commits
  • a4bc13f chore: bump version to 1.18.1 (#582)
  • 3c4b4ee fix: tighten package specifier validation in install_packages() (#581)
  • 986801f chore(deps): bump python-multipart from 0.0.27 to 0.0.31 (#527)
  • 1a79821 chore(deps): bump soupsieve from 2.8 to 2.8.4 (#575)
  • 3a4361e chore(deps): bump cryptography from 46.0.7 to 48.0.1 (#531)
  • 8e1abcf chore(deps): bump pyjwt from 2.12.0 to 2.13.0 (#525)
  • 738eb0f chore(deps): bump starlette from 0.49.1 to 1.3.1 (#530)
  • 8df87bb chore: bump version to 1.18.0 (#574)
  • f855616 fix: floor monotonic timestamps to milliseconds before comparison (#573)
  • a271ab4 fix: order AgentCore Memory events at millisecond resolution (#572)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 16, 2026
@github-actions

github-actions Bot commented Aug 16, 2026

Copy link
Copy Markdown

Commit: 9dd9cb4 | Updated: 2026-08-18 19:36:58 UTC

Security Scan Results

Scanner S C H M L I Time Action Result Thresh
bandit 0 0 0 0 0 0 841ms 0 PASSED MED (g)
cdk-nag 0 0 0 0 0 0 8.1s 0 PASSED MED (g)
cfn-nag 0 0 0 0 0 0 7ms 0 PASSED MED (g)
checkov 0 0 0 0 0 0 5.2s 0 PASSED MED (g)
detect-secrets 0 0 0 0 0 0 26ms 0 PASSED MED (g)
grype 0 3 0 0 0 0 1m 0s 3 FAILED MED (g)
npm-audit 0 0 0 0 0 0 305ms 0 PASSED MED (g)
opengrep 0 0 0 0 0 0 17.0s 0 PASSED MED (g)
semgrep 0 0 0 0 0 0 <1ms 0 MISSING MED (g)
syft 0 0 0 0 0 0 2.7s 0 PASSED MED (g)

Bumps [bedrock-agentcore](https://github.com/aws/bedrock-agentcore-sdk-python) from 1.4.7 to 1.18.1.
- [Release notes](https://github.com/aws/bedrock-agentcore-sdk-python/releases)
- [Changelog](https://github.com/aws/bedrock-agentcore-sdk-python/blob/main/CHANGELOG.md)
- [Commits](aws/bedrock-agentcore-sdk-python@v1.4.7...v1.18.1)

---
updated-dependencies:
- dependency-name: bedrock-agentcore
  dependency-version: 1.18.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/agent-code/agui-strands-agent/bedrock-agentcore-1.18.1 branch from 04fe5b2 to 9dd9cb4 Compare August 18, 2026 18:53
@Robobc

Robobc commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

Superseded by #19, which groups this bump with the rest of the python dependencies. Dependency updates here are verified with container builds and live agent invocations before merging.

@Robobc Robobc closed this Aug 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/agent-code/agui-strands-agent/bedrock-agentcore-1.18.1 branch August 18, 2026 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant