Agent Framework

v0.7.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 13d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai ai-agents anthropic deno docker llm

+1 more

openai

Affected surfaces

auth rbac breaking_upgrade

ReleasePort's take

Light signal

editorial:auto 10d

The `tools.custom` API has been removed in v0.7.1; migrate custom tools to MCP.

Why it matters: Affects any code using `tools.custom`; migration required before upgrade (severity 70).

Summary

AI summary

tools.custom has been removed, requiring migration to MCP as the extension point for custom tools.

Changes in this release

Type	Severity	Summary	CVE
Security
Security	High	Hermetic mode enforces network restrictions at the Deno layer. Hermetic mode enforces network restrictions at the Deno layer. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Security	High	Wildcard hosts compile into `--allow-net` for controlled access. Wildcard hosts compile into `--allow-net` for controlled access. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Security	High	Resolves symlinks before authorizing file paths. Resolves symlinks before authorizing file paths. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Security	High	Redacts scoped secrets from tool output, traces, logs, and persistence. Redacts scoped secrets from tool output, traces, logs, and persistence. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Security	Medium	Provides a bare `` escape hatch for net/run operations. Provides a bare `` escape hatch for net/run operations. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Breaking	High	Removes `tools.custom`; use MCP for custom tools. Removes `tools.custom`; use MCP for custom tools. Source: llm_adapter@2026-07-16 Confidence: low	—
Feature
Feature	Medium	Adds voice agents to interact live in Discord voice channels. Adds voice agents to interact live in Discord voice channels. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Medium	Agents can hear voice notes and reply with spoken responses. Agents can hear voice notes and reply with spoken responses. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Medium	Enables vision capability for agents to process sent images. Enables vision capability for agents to process sent images. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Medium	Introduces GitHub webhook trigger as a first-class event source. Introduces GitHub webhook trigger as a first-class event source. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Low	Adds `/stop` command to abort the current run. Adds `/stop` command to abort the current run. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—

Full changelog

Highlights

Voice agents — talk to an agent live in a Discord voice channel; agents also hear voice notes and speak the reply back
Vision — agents can see the images people send them
GitHub trigger — a first-class trigger for webhook events
Permissions & security — hermetic mode enforces net at the Deno layer, wildcard hosts compile into --allow-net, a bare * escape hatch for net/run, symlinks are resolved before authorizing a path, and scoped secrets are redacted from tool output, traces, logs and persistence
/stop — aborts the run in progress

Breaking change

tools.custom has been removed — MCP is the extension point for custom tools

Note: v0.7.0 was published to JSR with a stale internal version constant and is superseded by this release. Use 0.7.1.

Full Changelog: https://github.com/loopedautomation/agent-framework/compare/v0.7.0...v0.7.1

Breaking Changes

`tools.custom` has been removed — use MCP as the extension point for custom tools.

Security Fixes

Hermetic mode hardens security by enforcing net at the Deno layer, compiling wildcard hosts into `--allow-net`, resolving symlinks before authorization, and redacting scoped secrets from all outputs and persistence.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Agent Framework

Get notified when new releases ship.

About Agent Framework

All releases →