docker-agent 1.74.0

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

Details

release notes

This release introduces self-update functionality, session read-only mode, and 1Password CLI integration, along with model selection improvements and various bug fixes.
What's New

Adds opt-in self-update functionality via DOCKER_AGENT_AUTO_UPDATE environment variable with interactive confirmation
Adds --session-read-only flag to view sessions without sending messages in TUI mode
Adds 1Password CLI integration for secret resolution using op:// references
Adds first_available model selection for automatic fallback across multiple model candidates
Adds user_steering_messages_submit and user_followup_submit hooks for queued user messages

Improvements

Updates default agent to use first_available model selection with multi-provider fallbacks
Updates default model versions: OpenAI from gpt-5-mini to gpt-5, Google from gemini-2.5-flash to gemini-3.5-flash
Updates coder agent to use first_available model selection instead of hardcoded Anthropic models

Bug Fixes

Fixes tool call being dropped when finish_reason shares the same chunk in streaming responses
Fixes orphaned tool results on session resume that caused validation errors on AWS Bedrock
Fixes agent field not being preserved during command expansion, causing incorrect routing to root agent
Fixes binary files being processed in content search operations
Fixes self-update validation to prevent arbitrary file deletion and detect help flags properly
Fixes IPv6 6to4, NAT64, site-local and CGNAT ranges not being blocked in SSRF protection

Technical Changes

Hardens self-update download and re-exec process against tampering with digest and checksum verification
Uses SSRF-safe HTTP client for MCP OAuth metadata fetches
Hardens 1Password provider against silent pass-through and PATH hijacking
Fixes custom-base-image evaluation template to include docker-agent binary and entrypoint
Removes broken MCP servers from configuration


What's Changed

docs: update CHANGELOG.md for v1.73.0 by @docker-read-write[bot] in docs: update CHANGELOG.md for v1.73.0 docker/docker-agent#2990
feat: add first_available model selection by @dgageot in feat: add first_available model selection docker/docker-agent#2991
fix: don't drop tool call when finish_reason shares the chunk by @Sayt-0 in fix: don't drop tool call when finish_reason shares the chunk docker/docker-agent#2992
chore: bump go dependencies (acp-go-sdk, goja) by @dgageot in chore: bump go dependencies (acp-go-sdk, goja) docker/docker-agent#2995
feat: add opt-in self-update by @dgageot in feat: add opt-in self-update docker/docker-agent#2993
docs: update agent config reference, custom provider api_type, and slash command behavior by @aheritier in docs: update agent config reference, custom provider api_type, and slash command behavior docker/docker-agent#2999
feat: update default agent to use first_available model selection by @dgageot in feat: update default agent to use first_available model selection docker/docker-agent#2997
refactor(coder): use first_available model selection with multi-provider fallbacks by @dgageot in refactor(coder): use first_available model selection with multi-provider fallbacks docker/docker-agent#2996
feat: add user_steering_messages_submit and user_followup_submit hooks by @simonferquel-clanker in feat: add user_steering_messages_submit and user_followup_submit hooks docker/docker-agent#3000
docs: add thinking/reasoning guide and expand provider thinking docs by @rumpl in docs: add thinking/reasoning guide and expand provider thinking docs docker/docker-agent#3004
docs: update default model examples to gpt-5 and gemini-3.5-flash by @aheritier in docs: update default model examples to gpt-5 and gemini-3.5-flash docker/docker-agent#3003
fix: drop orphaned tool results on session resume by @Sayt-0 in fix: drop orphaned tool results on session resume docker/docker-agent#3001
docs: sync config examples with updated default models (gpt-5, gemini-3.5-flash) by @aheritier in docs: sync config examples with updated default models (gpt-5, gemini-3.5-flash) docker/docker-agent#3012
fix: preserve agent field during command expansion by @dgageot in fix: preserve agent field during command expansion docker/docker-agent#3007
docs: update remaining gpt-5-mini → gpt-5 examples across docs by @aheritier in docs: update remaining gpt-5-mini → gpt-5 examples across docs docker/docker-agent#3025
feat: add --session-read-only flag to view sessions without sending messages by @gtardif in feat: add --session-read-only flag to view sessions without sending messages docker/docker-agent#3026
fix: skip binary files in content search by @dgageot in fix: skip binary files in content search docker/docker-agent#3006
docs: document --session-read-only flag for TUI read-only mode by @aheritier in docs: document --session-read-only flag for TUI read-only mode docker/docker-agent#3028
fix(evals): copy docker-agent binary + entrypoint in custom-base-image template by @hamza-jeddad in fix(evals): copy docker-agent binary + entrypoint in custom-base-image template docker/docker-agent#3029
chore: bump go dependencies by @dgageot in chore: bump go dependencies docker/docker-agent#3005
fix: block IPv6 6to4, NAT64, site-local and CGNAT ranges in IsPublicIP by @ronan-thibaut-glitch in fix: block IPv6 6to4, NAT64, site-local and CGNAT ranges in IsPublicIP docker/docker-agent#3031
Remove broken MCP servers by @dgageot in Remove broken MCP servers docker/docker-agent#3032
chore: bump go dependencies by @dgageot in chore: bump go dependencies docker/docker-agent#3033
fix: use SSRF-safe HTTP client for MCP OAuth authorization server metadata fetch by @ronan-thibaut-glitch in fix: use SSRF-safe HTTP client for MCP OAuth authorization server metadata fetch docker/docker-agent#3035
feat: add 1Password CLI integration for secret resolution by @dgageot in feat: add 1Password CLI integration for secret resolution docker/docker-agent#3036

New Contributors

@ronan-thibaut-glitch made their first contribution in fix: block IPv6 6to4, NAT64, site-local and CGNAT ranges in IsPublicIP docker/docker-agent#3031

Full Changelog: docker/docker-agent@v1.73.0...v1.74.0

View the full release notes at https://github.com/docker/docker-agent/releases/tag/v1.74.0.

---

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.