v0.118.1
Agenta-AI/agentav0.118.1Sep 14, 2026by ashrafchowdury
Upgrading?
AI Summary
This release focuses on critical security patches for vulnerabilities in Next.js, Astro, and various dependencies, alongside a comprehensive UI overhaul to the shadcn design system and several mobile app improvements.
Key Highlights
- Patched critical security vulnerabilities including Next.js and Astro RCE risks, along with fixes for aiohttp, fast-uri, and js-yaml.
- Implemented a major UI redesign using the shadcn design system across menus, dialogs, alerts, and drawers.
- Enhanced mobile app functionality including API key management, playground inspector controls, and version display.
- Fixed critical frontend crashes and improved image handling security by refusing images with specific host targets.
New Features
- Restyled UI components (DropdownMenu, Dialog, Alert, Sheet) using the shadcn design system.
- Mobile forms now open as modals for better usability.
- Mobile Settings page now supports creating and deleting API keys.
- Updated API reference documentation.
Full Release Notes
## What's Changed * [docs] Update API reference docs by @github-actions[bot] in https://github.com/Agenta-AI/agenta/pull/6781 * fix(services): route under the public /services prefix without a stripping proxy by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6702 * fix(web): patch critical Next.js RCE vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6790 * fix(website): patch critical Astro RCE vulnerability by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6791 * fix(python): patch aiohttp response parser vulnerability by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6792 * fix(deps): patch fast-uri SSRF vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6793 * fix(web): patch Sharp image-decoder vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6794 * fix(website): patch Wrangler transitive vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6795 * fix(web): patch js-yaml CPU denial of service by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6796 * fix(runner): patch Jaeger header crash by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6797 * fix(web): patch brace-expansion resource exhaustion by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6799 * fix(docs): patch archived tracing dependencies by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6800 * fix(web): patch remaining transitive vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6801 * [6742] fix(frontend): Stop the config pane resize from crashing /m by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6782 * [6813] fix(mobile): Wire Playground inspector controls in /m by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6815 * fix(frontend): Skills page follows the browse toolbar layout by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6851 * [6695] fix(frontend): Report a session rename whose header write did not land by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6844 * [6803] fix(frontend): Let the mobile Settings > API keys page create and delete keys by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6824 * [6680] fix(frontend): Refuse an image in a reply whose target names a host by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6807 * [6206] fix(frontend): Lay settings tables out for the viewport they are on by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6805 * [feat] Restyle DropdownMenu to the shadcn look by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6827 * [feat] Give controls shadcn's neutral focus ring by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6828 * [feat] Add the shadcn Empty parts and rebuild the empty states by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6830 * [feat] Replace the antd Spin port with shadcn's Spinner by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6829 * [feat] Restyle Dialog and AlertDialog and open mobile forms as modals by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6831 * [feat] Restyle Alert to the shadcn look by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6833 * [fix] Clear the mobile composer attachments when the message leaves by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6848 * [fix] Keep automation messages focused on the task by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6838 * [6814] fix(frontend): Show version in mobile sidebar by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6816 * [feat] Retune the control scale and Button to the shadcn preset by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6826 * [fix] Make the connect dock's Retry reuse the pending connection [AGE-4345] by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6850 * [AGE-4348] fix(frontend): Name the agent of variant- or revision-bound automations by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6849 * [feat] Restyle Sheet and EnhancedDrawer to the shadcn look by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6832 * [fix] Send an automation's test run on /m and accept variant-bound agents [AGE-4355] by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6855 * [release] v0.118.1 by @github-actions[bot] in https://github.com/Agenta-AI/agenta/pull/6784 **Full Changelog**: https://github.com/Agenta-AI/agenta/compare/v0.118.0...v0.118.1
Related Repositories
openclaw/openclaw★ 392,691
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
nilbuild/developer-roadmap★ 370,064
Interactive roadmaps, guides and other educational content to help developers grow in their careers.
morluto/rea★ 357,526
Reverse engineer anything with agents, from app behavior down to native binaries.
anomalyco/opencode★ 219,654
The open source coding agent.
n8n-io/n8n★ 208,248
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.