Agno 3.0.4 makes knowledge-base file ingestion opt-in

Agno turned off automatic file ingestion in its knowledge-base tools with its 3.0.4 release, published August 30.

The default mattered because of how shared knowledge bases behave. Under scope="shared", anything one agent ingests becomes readable by every other agent on that knowledge base. A single wide-open path, an env file or a credentials directory, got redistributed to the whole group automatically. That risk hit any team pooling multiple agents on one knowledge base. Every member inherited whatever got ingested, regardless of which agent pulled it in.

Version 3.0.4 replaces the 2.x enable_ingest and enable_remove flags with per-tool flags. Ingestion is now something you turn on per tool, not something left on by default.

The release also moves agno.tools.knowledge_management to agno.tools.knowledge, with no compatibility shim. Code built against 3.0.3 breaks on import until it's updated.

The fix only changes what happens next. Knowledge bases that already ingested a broad path under 2.x's on-by-default setting still have that content synced to every agent that shares the base. The version bump doesn't retroactively narrow what's already there.