v0.118.1

Agenta-AI/agentav0.118.1Sep 14, 2026by ashrafchowdury

Upgrading?

AI Summary

This release focuses on critical security patches for vulnerabilities in Next.js, Astro, and various dependencies, alongside a comprehensive UI overhaul to the shadcn design system and several mobile app improvements.

Key Highlights

  • Patched critical security vulnerabilities including Next.js and Astro RCE risks, along with fixes for aiohttp, fast-uri, and js-yaml.
  • Implemented a major UI redesign using the shadcn design system across menus, dialogs, alerts, and drawers.
  • Enhanced mobile app functionality including API key management, playground inspector controls, and version display.
  • Fixed critical frontend crashes and improved image handling security by refusing images with specific host targets.

New Features

  • Restyled UI components (DropdownMenu, Dialog, Alert, Sheet) using the shadcn design system.
  • Mobile forms now open as modals for better usability.
  • Mobile Settings page now supports creating and deleting API keys.
  • Updated API reference documentation.

Full Release Notes

## What's Changed
* [docs] Update API reference docs by @github-actions[bot] in https://github.com/Agenta-AI/agenta/pull/6781
* fix(services): route under the public /services prefix without a stripping proxy by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6702
* fix(web): patch critical Next.js RCE vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6790
* fix(website): patch critical Astro RCE vulnerability by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6791
* fix(python): patch aiohttp response parser vulnerability by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6792
* fix(deps): patch fast-uri SSRF vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6793
* fix(web): patch Sharp image-decoder vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6794
* fix(website): patch Wrangler transitive vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6795
* fix(web): patch js-yaml CPU denial of service by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6796
* fix(runner): patch Jaeger header crash by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6797
* fix(web): patch brace-expansion resource exhaustion by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6799
* fix(docs): patch archived tracing dependencies by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6800
* fix(web): patch remaining transitive vulnerabilities by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6801
* [6742] fix(frontend): Stop the config pane resize from crashing /m by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6782
* [6813] fix(mobile): Wire Playground inspector controls in /m by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6815
* fix(frontend): Skills page follows the browse toolbar layout by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6851
* [6695] fix(frontend): Report a session rename whose header write did not land by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6844
* [6803] fix(frontend): Let the mobile Settings > API keys page create and delete keys by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6824
* [6680] fix(frontend): Refuse an image in a reply whose target names a host by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6807
* [6206] fix(frontend): Lay settings tables out for the viewport they are on by @ardaerzin in https://github.com/Agenta-AI/agenta/pull/6805
* [feat] Restyle DropdownMenu to the shadcn look by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6827
* [feat] Give controls shadcn's neutral focus ring by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6828
* [feat] Add the shadcn Empty parts and rebuild the empty states by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6830
* [feat] Replace the antd Spin port with shadcn's Spinner by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6829
* [feat] Restyle Dialog and AlertDialog and open mobile forms as modals by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6831
* [feat] Restyle Alert to the shadcn look by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6833
* [fix] Clear the mobile composer attachments when the message leaves by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6848
* [fix] Keep automation messages focused on the task by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6838
* [6814] fix(frontend): Show version in mobile sidebar by @mmabrouk in https://github.com/Agenta-AI/agenta/pull/6816
* [feat] Retune the control scale and Button to the shadcn preset by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6826
* [fix] Make the connect dock's Retry reuse the pending connection [AGE-4345] by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6850
* [AGE-4348] fix(frontend): Name the agent of variant- or revision-bound automations by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6849
* [feat] Restyle Sheet and EnhancedDrawer to the shadcn look by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6832
* [fix] Send an automation's test run on /m and accept variant-bound agents [AGE-4355] by @ashrafchowdury in https://github.com/Agenta-AI/agenta/pull/6855
* [release] v0.118.1 by @github-actions[bot] in https://github.com/Agenta-AI/agenta/pull/6784


**Full Changelog**: https://github.com/Agenta-AI/agenta/compare/v0.118.0...v0.118.1

Related Repositories