DeerFlow 2.1.0: 772-PR milestone — verifiable subagent delegation, pluggable memory, five remote sandboxes
ByteDance’s DeerFlow shipped v2.1.0 on 2026-09-24, closing the milestone with 772 merged PRs (~83k GitHub stars). Focus: trust and ops—verifiable subagent delegation, optional durable batch_task, pluggable memory (DeerMem / OpenViking / mem0 HTTP), plus E2B, BoxLite micro-VM, Tenki and OpenSandbox providers. Breakings: unconditional X-Trace-Id, reserved /mnt/skills, memory config under memory.backend_config, Docker bind defaults to 127.0.0.1.
Key Takeaways
- Shipped: v2.1.0 — 772 PRs; site deerflow.tech
- Verifiable subagent delegation + tamper-evident tool stamps; optional durable batch_task
- Pluggable memory.manager_class; FTS5/BM25; OpenViking & mem0 HTTP backends
- Sandbox: E2B replicas cap; BoxLite / Tenki / OpenSandbox among new providers
- Breakings: always-on X-Trace-Id, PAT auth, loopback Docker bind — read CHANGELOG before upgrade