docker-agent

v1.78.0 Feature

This release adds 4 notable features for engineering teams evaluating rollout.

Published 1mo AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agents ai

Affected surfaces

deps

Summary

AI summary

Updates Technical Changes, What's New, and Bug Fixes across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Medium	Restricts localhost HTTP redirects to localhost‑only targets for security Restricts localhost HTTP redirects to localhost‑only targets for security Source: granite4.1:30b@2026-06-11-audit Confidence: low	—
Feature
Feature	Medium	Adds ability to cycle model thinking level with Shift+Tab in the TUI Adds ability to cycle model thinking level with Shift+Tab in the TUI Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Medium	Adds `title_model` configuration field for delegating session title generation to a different model Adds `title_model` configuration field for delegating session title generation to a different model Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Medium	Adds checksum verification for tool auto‑install downloads to ensure binary integrity Adds checksum verification for tool auto‑install downloads to ensure binary integrity Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Medium	Adds support for `version_overrides` in tool auto‑install for better package configuration Adds support for `version_overrides` in tool auto‑install for better package configuration Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Medium	Updates remote MCP examples to prefer Streamable HTTP transport over SSE Updates remote MCP examples to prefer Streamable HTTP transport over SSE Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Medium	Exposes embeddable TUI components (toolconfirm, StaticSessionState, Stopper) for downstream integration Exposes embeddable TUI components (toolconfirm, StaticSessionState, Stopper) for downstream integration Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Medium	Allows loading agent from localhost HTTP URLs for local development Allows loading agent from localhost HTTP URLs for local development Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Medium	Adds Docker Desktop JWT authentication when pulling agent from .docker.com URLs Adds Docker Desktop JWT authentication when pulling agent from .docker.com URLs Source: llm_adapter@2026-06-11 Confidence: high	—
Deprecation	Low	Removes non-working Supabase and Tally entries from MCP catalog documentation Removes non-working Supabase and Tally entries from MCP catalog documentation Source: granite4.1:30b@2026-06-11-audit Confidence: low	—
Bugfix
Bugfix	Medium	Fixes reconnection of remote MCP toolsets after clean idle SSE connection closes Fixes reconnection of remote MCP toolsets after clean idle SSE connection closes Source: llm_adapter@2026-06-11 Confidence: high	—
Bugfix	Medium	Fixes crash during elicitation channel close by guarding against in‑flight sends Fixes crash during elicitation channel close by guarding against in‑flight sends Source: llm_adapter@2026-06-11 Confidence: high	—
Bugfix	Low	Fixes panic in ScriptToolSet.Instructions() when tool argument descriptions are missing Fixes panic in ScriptToolSet.Instructions() when tool argument descriptions are missing Source: granite4.1:30b@2026-06-11-audit Confidence: low	—
Bugfix	Low	Fixes GitHub transport change that was causing test assertion failures Fixes GitHub transport change that was causing test assertion failures Source: granite4.1:30b@2026-06-11-audit Confidence: low	—
Refactor	Low	Always allowlists models.dev in sandbox proxy for model catalog resolution Always allowlists models.dev in sandbox proxy for model catalog resolution Source: granite4.1:30b@2026-06-11-audit Confidence: low	—

Full changelog

This release improves MCP server connectivity, adds model thinking level controls, and enhances tool installation safety with checksum verification.

What's New

Adds ability to cycle model thinking level with Shift+Tab in the TUI
Adds title_model configuration field for delegating session title generation to a different model
Adds checksum verification for tool auto-install downloads to ensure binary integrity
Adds support for version_overrides in tool auto-install for better package configuration

Improvements

Updates remote MCP examples to prefer Streamable HTTP transport over SSE
Exposes embeddable TUI components (toolconfirm, StaticSessionState, Stopper) for downstream integration
Allows loading agent from localhost HTTP URLs for local development
Adds Docker Desktop JWT authentication when pulling agent from .docker.com URLs

Bug Fixes

Fixes reconnection of remote MCP toolsets after clean idle SSE connection closes
Fixes crash during elicitation channel close by guarding against in-flight sends
Fixes panic in ScriptToolSet.Instructions() when tool argument descriptions are missing
Fixes GitHub transport change that was causing test assertion failures

Technical Changes

Always allowlists models.dev in sandbox proxy for model catalog resolution
Restricts localhost HTTP redirects to localhost-only targets for security
Removes non-working Supabase and Tally entries from MCP catalog documentation

What's Changed

docs: update remote MCP examples to prefer Streamable HTTP over SSE by @aheritier in https://github.com/docker/docker-agent/pull/3065
docs: update configuration, sandbox, tools, Go SDK, and MCP catalog docs by @aheritier in https://github.com/docker/docker-agent/pull/3068
Cycle model thinking level with shift+tab by @rumpl in https://github.com/docker/docker-agent/pull/3067
fix: reconnect remote MCP toolsets after clean idle SSE close by @aheritier in https://github.com/docker/docker-agent/pull/3064
fix: guard type assertions in ScriptToolSet.Instructions() against missing description by @simonferquel-clanker in https://github.com/docker/docker-agent/pull/3072
fix: guard elicitation channel close against in-flight sends by @aheritier in https://github.com/docker/docker-agent/pull/3070
Allow pulling agent from localhost http URL for local dev by @gtardif in https://github.com/docker/docker-agent/pull/3075
docs: update CHANGELOG.md for v1.77.0 by @docker-read-write[bot] in https://github.com/docker/docker-agent/pull/3062
Bump Go dependencies by @dgageot in https://github.com/docker/docker-agent/pull/3076
docs: update CHANGELOG.md for v1.76.0 by @docker-read-write[bot] in https://github.com/docker/docker-agent/pull/3061
Add Docker Desktop JWT when pulling agent from a .docker.com URL by @gtardif in https://github.com/docker/docker-agent/pull/3077