Skip to content

docker-agent

v1.57.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agents ai

Summary

AI summary

Adds an unload on_agent_switch hook for releasing model resources when switching agents.

Full changelog

This release improves markdown rendering performance, adds agent switching capabilities, and enhances secret redaction with better error handling.

What's New

  • Adds unload on_agent_switch builtin hook for releasing model resources when switching between agents

Improvements

  • Speeds up and simplifies markdown fast renderer for better performance
  • Trims builtin tool schemas to save tokens in LLM requests
  • Tightens Docker PAT redaction and adds organization access tokens support
  • Adds more vendor-prefixed secret patterns for improved security scanning

Bug Fixes

  • Fixes retry handling for Vertex AI 'function response parts' 400 errors that occur intermittently
  • Restores styles on continuation lines of broken words in markdown rendering
  • Fixes H1 prefix and ANSI style handling in wrapText functionality
  • Defensively lowercases transient patterns in model error handling
  • Caps quantifiers on new secret rules to prevent adjacent text being incorrectly redacted

Technical Changes

  • Adopts new rubocop-go DSL across all linting cops for better code organization
  • Uses slog.WarnContext where context is available for improved logging
  • Drains unload response body and documents single-tenant assumption

What's Changed

  • docs: update CHANGELOG.md for v1.56.0 by @docker-read-write[bot] in https://github.com/docker/docker-agent/pull/2695
  • Make the FastMarkdown renderer simpler and faster by @dgageot in https://github.com/docker/docker-agent/pull/2686
  • refactor(lint): adopt new rubocop-go DSL across all cops by @dgageot in https://github.com/docker/docker-agent/pull/2687
  • fix: retry transient Vertex AI 'function response parts' 400 errors by @dgageot in https://github.com/docker/docker-agent/pull/2691
  • shrink builtin tool schemas to save tokens by @dgageot in https://github.com/docker/docker-agent/pull/2694
  • feat: add unload on_agent_switch builtin hook by @dgageot in https://github.com/docker/docker-agent/pull/2684
  • secretsscan: tighten Docker PAT, add new vendor patterns, cap quantifiers by @dgageot in https://github.com/docker/docker-agent/pull/2697

Full Changelog: https://github.com/docker/docker-agent/compare/v1.56.0...v1.57.0

Security Fixes

  • Tightens Docker PAT redaction, adds organization access token support, and caps quantifiers on new secret rules to prevent adjacent text mis‑redaction

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track docker-agent

Get notified when new releases ship.

Sign up free

About docker-agent

AI Agent Builder and Runtime by Docker Engineering

All releases →

Related context

Earlier breaking changes

  • v1.71.0 Freezes configuration schema v9 and starts v10 as latest version

Beta — feedback welcome: [email protected]