This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
ReleasePort's take
Light signalVersion v1.70.2 introduces inline‑skill configuration and environment‑variable syntax for path fields while fixing several notification and OAuth bugs.
Why it matters: Adds new agent YAML features (inline skills, ${env.VAR} support) and resolves critical notification duplication and OAuth handling regressions affecting user experience.
Summary
AI summaryUpdates Technical Changes, What's New, and Bug Fixes across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds support for inline skills in agent YAML config Adds support for inline skills in agent YAML config Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Feature | Medium |
Adds ${env.VAR} syntax support for path fields as alias to ${VAR} Adds ${env.VAR} syntax support for path fields as alias to ${VAR} Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Performance | Medium |
Streams tool outputs for better real-time feedback Streams tool outputs for better real-time feedback Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Deprecation | Low |
Removes obsolete expansion‑mismatch warnings for path fields Removes obsolete expansion‑mismatch warnings for path fields Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Deprecation | Low |
Removes notification‑layer deduplication logic Removes notification‑layer deduplication logic Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Bugfix | Medium |
Fixes duplicate persistent toolset‑failure notifications stacking in the TUI Fixes duplicate persistent toolset‑failure notifications stacking in the TUI Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Bugfix | Medium |
Fixes MCP OAuth dialog re‑appearing after user declines authentication Fixes MCP OAuth dialog re‑appearing after user declines authentication Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Bugfix | Medium |
Surfaces inline‑skill decode errors and rejects file reads for inline skills Surfaces inline‑skill decode errors and rejects file reads for inline skills Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Bugfix | Medium |
Stops MCP server on OAuth decline and prevents incorrect information from being sent to the model Stops MCP server on OAuth decline and prevents incorrect information from being sent to the model Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Refactor | Low |
Extracts failureStreak helper in StartableToolSet Extracts failureStreak helper in StartableToolSet Source: llm_adapter@2026-06-01 Confidence: high |
— |
Full changelog
This release adds support for inline skills in agent configuration and improves environment variable handling in path fields, along with several bug fixes.
What's New
- Adds support for inline skills in agent YAML config, allowing skills to be defined directly without separate files
- Adds support for
${env.VAR}syntax in path fields as an alias for${VAR}
Improvements
- Streams tool outputs for better real-time feedback
Bug Fixes
- Fixes duplicate persistent toolset-failure notifications that were stacking in the TUI
- Fixes MCP OAuth dialog re-appearing after user declines authentication
- Surfaces inline-skill decode errors and rejects file reads for inline skills
Technical Changes
- Removes obsolete expansion-mismatch warnings for path fields
- Extracts failureStreak helper in StartableToolSet
- Removes notification-layer deduplication
- Removes MCP server on OAuth decline and stops providing incorrect information to the model
What's Changed
- docs: update CHANGELOG.md for v1.70.1 by @docker-read-write[bot] in https://github.com/docker/docker-agent/pull/2940
- Stream tool outputs by @rumpl in https://github.com/docker/docker-agent/pull/2945
- feat: support inline skills in agent YAML config by @dgageot in https://github.com/docker/docker-agent/pull/2946
- chore: bump direct Go dependencies by @dgageot in https://github.com/docker/docker-agent/pull/2941
- feat(config): accept ${env.X} in path fields (steps 2-4 of #2615) by @dgageot in https://github.com/docker/docker-agent/pull/2944
- fix: dedupe persistent toolset-failure notifications by @dgageot in https://github.com/docker/docker-agent/pull/2943
- fix(mcp): stop the OAuth Authentication Request loop after the user clicks Cancel by @trungutt in https://github.com/docker/docker-agent/pull/2949
Full Changelog: https://github.com/docker/docker-agent/compare/v1.70.1...v1.70.2
Breaking Changes
- Removes obsolete expansion-mismatch warnings for path fields
- Removes notification-layer deduplication
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v1.71.0 Freezes configuration schema v9 and starts v10 as latest version
Beta — feedback welcome: [email protected]