This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryUpdates Technical Changes, What's New, and Bug Fixes across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds `--app-name` flag to override default label in TUI status bar and window title Adds `--app-name` flag to override default label in TUI status bar and window title Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Adds allow-list (`allowed_servers`) and block-list (`blocked_servers`) filtering for MCP catalog servers Adds allow-list (`allowed_servers`) and block-list (`blocked_servers`) filtering for MCP catalog servers Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Automatically proceeds after enabling an OAuth server in MCP catalog without user repeat Automatically proceeds after enabling an OAuth server in MCP catalog without user repeat Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Restores dynamic progress‑bar width in evaluation mode (no longer fixed at 10) Restores dynamic progress‑bar width in evaluation mode (no longer fixed at 10) Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes rune‑safe truncation across multiple UI components (file picker, session browser, etc.) Fixes rune‑safe truncation across multiple UI components (file picker, session browser, etc.) Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes rune‑safe truncation of operation descriptions in OpenAPI handling Fixes rune‑safe truncation of operation descriptions in OpenAPI handling Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes rune‑safe search‑result preview in filesystem operations Fixes rune‑safe search‑result preview in filesystem operations Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Prevents sending split UTF‑8 runes to embedding models in RAG operations Prevents sending split UTF‑8 runes to embedding models in RAG operations Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Populates ModelID field correctly in after_llm_call hook payload Populates ModelID field correctly in after_llm_call hook payload Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Refactor | Low |
Removes dead code in WASM agent loop selection Removes dead code in WASM agent loop selection Source: llm_adapter@2026-05-29 Confidence: high |
— |
Full changelog
This release focuses on text handling improvements, OAuth flow enhancements for MCP catalog servers, and server filtering capabilities.
What's New
- Adds
--app-nameflag to override the default "docker agent" label in the TUI status bar and window title - Adds allow-list and block-list filtering for MCP catalog servers via
allowed_serversandblocked_serversconfiguration options
Improvements
- Tells the model to proceed automatically after enabling an OAuth server in MCP catalog instead of requiring user to repeat their request
- Restores dynamic progress bar width in evaluation mode (was previously fixed at width 10)
Bug Fixes
- Fixes rune-safe truncation across multiple UI components: file names in file picker, session titles in session browser, directory names in working-dir picker, tab titles, search query preview, and tool output preview
- Fixes rune-safe truncation of operation descriptions in OpenAPI handling
- Fixes rune-safe search-result preview in filesystem operations
- Prevents sending split UTF-8 runes to embedding models in RAG operations
- Populates ModelID field correctly in after_llm_call hook payload
Technical Changes
- Removes dead code in WASM agent loop selection
- Adds validation for allowed_servers and blocked_servers in MCP catalog configuration
- Adds warning for unknown server IDs in MCP catalog allow/block lists
- Updates documentation for CLI flags, hook payloads, and OAuth endpoints
What's Changed
- docs: update CHANGELOG.md for v1.69.0 by @docker-read-write[bot] in https://github.com/docker/docker-agent/pull/2919
- chore: bump direct Go dependencies by @dgageot in https://github.com/docker/docker-agent/pull/2918
- fix(runtime): populate ModelID in after_llm_call hook payload by @kimizuka in https://github.com/docker/docker-agent/pull/2911
- fix: rune-safe truncation and dead-code cleanup by @dgageot in https://github.com/docker/docker-agent/pull/2920
- Address review feedback on #2896 by @trungutt in https://github.com/docker/docker-agent/pull/2921
- docs: sync CLI flags and hook payload docs with recent changes by @aheritier in https://github.com/docker/docker-agent/pull/2927
- chore: bump direct Go dependencies by @dgageot in https://github.com/docker/docker-agent/pull/2926
- feat: add allow/block-list of servers to the mcp_catalog tool by @dgageot in https://github.com/docker/docker-agent/pull/2928
- docs: sync /docs with changes merged 2026-05-28 – 2026-05-29 by @aheritier in https://github.com/docker/docker-agent/pull/2929
- fix(mcpcatalog): tell the model to proceed after enabling an OAuth server by @trungutt in https://github.com/docker/docker-agent/pull/2925
New Contributors
- @kimizuka made their first contribution in https://github.com/docker/docker-agent/pull/2911
Full Changelog: https://github.com/docker/docker-agent/compare/v1.69.0...v1.70.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v1.71.0 Freezes configuration schema v9 and starts v10 as latest version
Beta — feedback welcome: [email protected]