This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryUpdates Bug Fixes, What's New, and feat across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds dynamic MCP HTTP headers via a header factory. Adds dynamic MCP HTTP headers via a header factory. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds `safe-auto` safety policy for shell operations, auto‑approving safe calls. Adds `safe-auto` safety policy for shell operations, auto‑approving safe calls. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds optional `cost` block to model configuration for per‑model token pricing. Adds optional `cost` block to model configuration for per‑model token pricing. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds opt‑in cache‑stable dynamic prompts, persisting frozen instruction snapshots. Adds opt‑in cache‑stable dynamic prompts, persisting frozen instruction snapshots. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes elicitation requests from concurrent background jobs being silently dropped, preventing handler deadlock. Fixes elicitation requests from concurrent background jobs being silently dropped, preventing handler deadlock. Source: llm_adapter@2026-07-15 Confidence: low |
— |
| Bugfix | Medium |
Fixes session cost dropping after compaction, keeping cost monotonic across reload. Fixes session cost dropping after compaction, keeping cost monotonic across reload. Source: llm_adapter@2026-07-15 Confidence: low |
— |
Full changelog
This release adds dynamic MCP HTTP headers, new shell safety policies, per-model custom pricing, and cache-stable dynamic prompts, along with fixes for elicitation delivery and session cost tracking.
What's New
- Adds dynamic MCP HTTP headers via a header factory, enabling context-aware HTTP header resolution instead of static headers fixed at startup
- Adds a
safe-autosafety policy for shell operations, providing a middle ground between prompting for every tool call and--yolomode; safe calls beyond shell are auto-approved under this policy, with an opt-insafermode available viaapprove-saferresume - Adds an optional
costblock to model configuration, allowing explicit per-model token pricing for custom, locally-hosted, or uncatalogued models - Adds opt-in cache-stable dynamic prompts (
cache_stable_promptsuser setting), persisting frozen instruction snapshots and appending chronological updates when trusted context changes
Bug Fixes
- Fixes elicitation requests from concurrent background jobs being silently dropped and blocking the requesting handler indefinitely
- Fixes session cost dropping after compaction (e.g., from $49 to $12) by keeping cost monotonic across compaction and preserving cost accounting across reload
What's Changed
- feat: implement dynamic MCP HTTP headers via header factory by @Piyush0049 in https://github.com/docker/docker-agent/pull/3583
- fix(runtime): reliable, correlation-safe, non-blocking elicitation delivery (#3584) by @aheritier in https://github.com/docker/docker-agent/pull/3587
- docs: update CHANGELOG.md for v1.109.0 by @docker-read-write[bot] in https://github.com/docker/docker-agent/pull/3661
- Add opt-in cache-stable dynamic prompts by @rumpl in https://github.com/docker/docker-agent/pull/3662
- fix(session): keep cost monotonic across compaction by @Sayt-0 in https://github.com/docker/docker-agent/pull/3663
- feat(safer_shell): add safe-auto safety policy by @trungutt in https://github.com/docker/docker-agent/pull/3647
- feat(config): declare explicit per-model token pricing with cost by @dgageot in https://github.com/docker/docker-agent/pull/3664
Full Changelog: https://github.com/docker/docker-agent/compare/v1.109.0...v1.110.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v1.71.0 Freezes configuration schema v9 and starts v10 as latest version
Beta — feedback welcome: [email protected]