Signed-off-by: pandego <7780875+pandego@users.noreply.github.com>

- fixes session title generation
- adds 'context_size' provider_opt for DMR usage instead of giving 'max_tokens' double responsibility to avoid confusion
- improved thinking budget support and fix for NoThinking()
- improves how flags are sent to the DMR model/runtime configuration endpoint
- clarify docs on sampling/runtime params

Signed-off-by: Christopher Petito <chrisjpetito@gmail.com>
Assisted-By: docker-agent

Automated changelog update for release v1.48.0

Assisted-By: Docker Agent

docs: update CHANGELOG.md for v1.48.0

Improve DMR support

fix(otel): align service resource schema

…patible

Assisted-By: docker-agent

…es-edcc51e8

bump github.com/docker/cli from v29.4.0+incompatible to v29.4.1+incompatible

The agent `skills` field now accepts a list that mixes sources and
skill names. Items equal to "local" or starting with http:// or
https:// are classified as sources; any other string is treated as
the name of a specific skill to expose to the agent.

When only skill names are given, the `local` source is used by
default, so `skills: [git, docker]` loads local skills and keeps
only those two. `skills: true` and `skills: false` still work as
before.

Changes:

* Add an Include field to latest.SkillsConfig and extend the
  YAML/JSON Marshal and Unmarshal methods to classify list items
  into Sources and Include, with symmetric round-trip.
* Apply the filter in teamloader.LoadWithConfig via a new
  filterSkillsByName helper. Unmatched names are logged as a
  warning; duplicate-name skills (e.g. one local, one remote) are
  all kept so downstream code can resolve precedence.
* Reject empty strings inside the list in validateSkillsConfiguration.
* Update agent-schema.json so `skills` is `oneOf` boolean or array.
* Add an examples/skills_filter.yaml and update the documentation
  (Skills feature page + Agent Config reference).

Closes #2404.

Assisted-By: docker-agent

…nings

A code review of the repository surfaced several bugs and security

issues that this commit addresses together:

  * content/store: resolveIdentifier and StoreArtifact now strictly

    validate digests ("sha256:" + 64 hex chars) before using them as

    filesystem path components. Without this, an identifier such as

    "sha256:../../etc/passwd" flowed through filepath.Join and let

    GetArtifact*/DeleteArtifact read or delete files outside the

    store directory. A new ErrInvalidDigest sentinel is returned and

    the refs-file path revalidates the digest on read.

  * skills/remote: the remote-skills loader now rejects index entries

    whose name is not a plain single path component (matched by a

    conservative regex). Previously only entry.Files was validated,

    so a hostile index could use a name like "../evil" to write

    cache files outside the cache directory and later redirect

    SKILL.md reads to attacker-chosen filesystem locations.

  * hooks/executor: PreToolUse hooks that fail to run to completion

    (timeout, parent-context cancellation, spawn error, missing

    binary, ...) now deny the tool call instead of silently allowing

    it. executeHook normalizes a fired context to a plain execution

    error so aggregateResults can reliably fail closed on that event.

    PostToolUse and other observational events keep their log-and-

    continue behavior.

  * agent: Agent.pendingWarnings is now guarded by a dedicated

    sync.Mutex. addToolWarning and DrainWarnings are called from the

    runtime loop, the MCP server, the TUI and the session manager in

    parallel, and the concurrent append/read+clear was a data race.

  * tools/builtin/shell: when cmd.Start() succeeds but the follow-up

    createProcessGroup call fails, a new reapSpawnedChild helper

    sends SIGTERM (with a SIGKILL escalation after a grace period)

    and calls cmd.Wait() so the child is reaped and its stdout/

    stderr pipes are closed. Both affected error paths now use it.

Each change ships with targeted tests (including -race where

relevant). mise lint is clean and the full test suite passes.

Assisted-By: docker-agent

…skills-in-yaml-f97b09f6

Support filtering skills by name in agent YAML (#2404)

…it can be used properly in conversations when using `serve api`

Signed-off-by: Guillaume Tardif <guillaume.tardif@gmail.com>

Encode agent source URL when using it as agent name and key, so that it can be used properly in conversations when using `serve api`

…-security-issue-d9ce6d2b

fix: harden artifact store, skills loader, hooks, shell and agent warnings