# Composio 0.15.0

- Product: Composio (https://whatsnew.fyi/product/composio)
- Vendor: Composio
- Date: 2026-08-07
- Version: 0.15.0
- Original notes: https://github.com/ComposioHQ/composio/releases/tag/%40composio/core%400.15.0
- Permalink: https://whatsnew.fyi/product/composio/releases/0.15.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **changed** — Replace the loose JSON Schema property type with a recursive, type-safe definition for JSONSchemaProperty
- **fixed** — Bound the background npm version check so registry outages cannot leave the request pending indefinitely
- **fixed** — Match sensitive upload path segments using the target filesystem's actual case sensitivity to prevent case-insensitive mounts from bypassing the denylist
- **fixed** — Redact secrets that appear inside JSON payloads in telemetry error text
- **changed** — Refresh the OpenAI runtime dependency to version 7
- **fixed** — Release unread response bodies on the paths the SDK knowingly abandons by canceling intermediate redirect bodies and releasing response bodies before throwing on failed requests
- **removed** — Remove the unused internal isNewerVersion helper

###### Minor Changes

- 1503786: Replace the loose JSON Schema property type with a recursive, type-safe definition.

  `JSONSchemaProperty` (re-exported from `@composio/core` and reachable through
  `Tool.input_parameters` / `Tool.output_parameters`) is now a concrete recursive
  interface instead of effectively `any`. Runtime behavior is unchanged, but
  consumer code that indexed into it without narrowing (for example
  `schema.properties.foo.type` or `schema.default.someField`) may see new type
  errors: `properties` entries are now possibly `undefined` and `default` /
  `enum` values are `unknown`. Narrow with optional chaining or explicit type
  guards when upgrading.

###### Patch Changes

- 2ac6ad3: Bound the background npm version check so registry outages cannot leave the request pending indefinitely.
- 5105612: Match sensitive upload path segments using the target filesystem's actual case sensitivity so case-insensitive mounts cannot bypass the denylist without over-blocking distinct paths on case-sensitive mounts.
- 051c8c5: Redact secrets that appear inside JSON payloads in telemetry error text. The key/value rule required the separator to follow the key name directly, so a serialized body such as `{"api_key": "..."}` — the shape error messages usually carry — was sent unredacted.
- e5c9ada: Refresh the OpenAI runtime dependency to version 7.
- ecd0861: Release unread response bodies on the paths the SDK knowingly abandons: cancel every intermediate redirect body in `ssrfSafeFetch`, and the response body before throwing on `!response.ok` in both URL-upload call sites, instead of leaving them for the garbage collector to reclaim.
- 2a6a051: Remove the unused internal `isNewerVersion` helper.
- Updated dependencies [1503786]
  - @composio/json-schema-to-zod@0.2.2