Skip to content

escapeboy/agent-fleet-o

v1.17.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agent-orchestration agentic-ai ai-agents ai-automation autonomous-agents claude
+14 more
crewai-alternative langgraph-alternative laravel livewire llm-workflow mcp-server model-context-protocol multi-agent n8n-alternative ollama openai php self-hosted workflow-automation

Affected surfaces

auth rbac

Summary

AI summary

Added ToolTemplate REST API, 1Password integration, GPU templates, MCP marketplace listings, AI Gateway UI, SSE chat streaming endpoint, and several security hardening fixes.

Full changelog

What's changed

  • chore: release v1.17.0 — GPU templates, MCP marketplace, integrations (8f4839e)
  • feat: add ToolTemplate REST API (index, show, deploy) (30565d4)
  • feat: 1Password integration — MCP tool + native driver (95b5794)
  • fix: remove hardcoded stats from marketplace seeder (d995052)
  • feat: seed marketplace with 34 official listings (22 skills + 12 agents) (45937cb)
  • feat: GPU templates, MCP marketplace, Apify, screenpipe, quick agent, integrations UX (78a3801)
  • feat: AgentScope-inspired patterns — 5 features + test fixes (946ab4f)
  • feat: a2ui MCP tools, migration, security audit, tests (88954ee)
  • feat: GSD-2 inspired AI Gateway intelligence + full UI (e989be6)
  • fix: KG search havingRaw bug + add chat memory extraction listener (9e1f86b)
  • fix: add A2uiRenderer class (missed in a2ui surface commit) (136fb3c)
  • fix: update tpetry/laravel-postgresql-enhanced 3.5→3.6 (tsvector compat fix) (1253c96)
  • feat: add view/edit modals to Knowledge Graph browser page (b63027b)
  • fix: add a2ui surface blade component (fixes view:cache on production) (7d2c902)
  • fix: add a2ui surface blade component (fixes view:cache on production) (10c7c14)
  • feat: assistant tools, MJML rendering, memory scoping, KG quality, artifact fixes (45d5a3d)
  • fix(artifacts): resolve file references + add missing content types (15f0940)
  • fix: remove 'team-knowledge' fallback — pass null for agentless experiments (397ace6)
  • feat: assistant email theme tools, MJML CLI+HTTP rendering (977ec88)
  • feat: assistant streaming, KG data quality, memory tag scoping (bf28b6e)
  • fix(outbound): remove simulated sends, fix email target resolution, add agent/trigger/signal improvements (a11c6e4)
  • feat(chatbot): add SSE streaming endpoint for chat messages (466374f)
  • fix(chatbot): extract 'text' output key + fallback for all chatbot types (d9edd9e)
  • fix(chatbot): lower RAG similarity threshold from 0.72 to 0.5 (b04ad96)
  • fix(chatbot): add 'text' key to delivery output extraction (ea4c191)
  • fix(chatbot): skill execution error messages + playbook step retry (6a9a13d)
  • fix(chatbot): skill execution error messages + playbook step retry (5a4c077)
  • feat(chatbot): add delivery listener for workflow results (370fd3a)
  • fix(workflow): handle string input_mapping in resolveInput (0723ad4)
  • fix(chatbot): skip scoring stage for chatbot workflow experiments (aa24389)
  • fix(chatbot): use team owner_id instead of team_id as actorUserId (e8f6c95)
  • fix(bridge): permanent stability improvements for unstable networks (1fba583)
  • fix(security): IDOR guard on knowledge_base_id, authorization on saveAiFeatures, stage_model_tiers validation (9b016c2)
  • feat: pre-existing config gaps — per-team overrides, GlobalSettings, agent fields (08c8ac6)
  • feat: cloud configurability for Hermes-inspired features — per-team settings, UI, API, MCP (a5bb80d)
  • fix: use experiment.thesis instead of non-existent goal column (9268982)

Upgrade

git fetch --tags origin
git checkout tags/v1.17.0
composer install --no-dev --optimize-autoloader
php artisan migrate --force
php artisan optimize

Docker users: Pull the latest image and restart your containers.

Security Fixes

  • IDOR guard on knowledge_base_id, added authorization checks for saveAiFeatures, validated stage_model_tiers (fix(security))

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track escapeboy/agent-fleet-o

Get notified when new releases ship.

Sign up free

About escapeboy/agent-fleet-o

AI Agent Mission Control with 200+ MCP tools. Manage agents, experiments, workflows, crews, skills, and more via stdio + HTTP/SSE. Self-hosted, open-source (AGPL-3.0)

All releases →

Related context

Beta — feedback welcome: [email protected]