v1.133.0

This release improves safety classification for background jobs and shell commands, enhances the --key option for share commands, and advances the internal config schema to v16.

What's New

• Adds classification of run_background_job commands using the same safety rules as shell commands, so background jobs are now properly evaluated (and prompted or denied) based on their actual command content
• The --key flag for docker agent share push and docker agent share pull now accepts either inline key material directly or a file://-prefixed path, in addition to the previous file path behavior

Bug Fixes

• Fixes atomic per-file vector store persistence so that file hash updates and chunk deletions no longer occur prematurely during the embedding process
• Fixes safety classification to resolve cmd/command arguments the same way the handlers do, ensuring the classified command matches what is actually executed

Technical Changes

• Removes the deprecated safer boolean flag from the shell toolset in config version 15
• Freezes config schema v15 as an immutable package and advances latest to v16

---

What's Changed

• refactor(config): remove deprecated safer shell flag from v15 by @dgageot in #4169
• feat(safety): classify run_background_job commands like shell by @dgageot in #4166
• feat(share): accept inline key or file:// path for --key by @dgageot in #4168
• docs: update CHANGELOG.md for v1.132.0 by @docker-read-write[bot] in #4167
• fix(rag): atomic per-file vector store persistence (#4073) by @aheritier in #4158
• feat(config): freeze v15 and start v16 as latest by @dgageot in #4170

Full Changelog: v1.132.0...v1.133.0