1.4.0

What's Changed

• Conditionally use a Pydantic model as a response format by @subpop in #252
• Further-simplify-response_format by @subpop in #255
• [RSPEED-2335] Wrap executed commands in sudo+systemd-run where possible by @subpop in #256
• Dynamically construct instructions by @subpop in #253
• [RSPEED-2314] Custom accept/reject UI for run_script_modify by @Jazzcort in #242
• Adapt to host theme and styling by @owtaylor in #266
• Avoid StrEnum for script_type by @owtaylor in #273
• fix(run_script): execute via wrapper instead of direct bash -c by @panyamkeerthana in #278
• [RSPEED-2404] persistence for mcp-apps by @Jazzcort in #269
• renovate.json: switch our range strategy to in-range-only by @owtaylor in #286
• Merge main into arbitrary-commands (2025-02-11) by @owtaylor in #274
• [RSPEED-2412] More focused UI for run-script mcp-app by @Jazzcort in #287
• Ignore pyz files with a glob by @samdoran in #289
• [RSPEED-2331] Figure out how to do different things for clients w/wo mcp-app support by @Jazzcort in #288
• run_script_modify_interactive: use default FastMCP rendering of content by @owtaylor in #290
• Convert --working-directory to --property=WorkingDirectory by @subpop in #294
• feat: Binding the css variables from host platform by @Jazzcort in #297
• [RSPEED-2459] Remove diskcache from the container by @samdoran in #299
• Update Python packages by @samdoran in #300
• Fix critical MITM vulnerability by enabling SSH host key verification by @x86girl in #303
• Disable container detection under test by default by @samdoran in #307
• chore: add CODEOWNERS file by @major in #308
• Update Konflux references by @samdoran in #291
• Update GitHub Artifact Actions (major) by @renovate[bot] in #292
• Update astral-sh/setup-uv action to v7.5.0 by @renovate[bot] in #295
• docs: remove get_audit_logs and update get_journal_logs by @alexxa in #305
• Make MCP server instructions depend on mcp-apps status by @owtaylor in #311
• fix: Only parse CLI args when running linux-mcp-server by @owtaylor in #310
• Merge main into experiment/guard-command-execution (2026-03-20) by @owtaylor in #312
• feat: add gatekeeper evaluation framework by @owtaylor in #309
• fix: update model tool instructions and gatekeerper prompt by @panyamkeerthana in #296
• chore(deps): update softprops/action-gh-release action to v2.6.1 by @renovate[bot] in #314
• chore(deps): update astral-sh/setup-uv action to v7.6.0 by @renovate[bot] in #315
• chore(deps): update actions/deploy-pages action to v5 by @renovate[bot] in #327
• Build the mcp-app before running uv by @subpop in #325
• fix(validation): reject path traversal via '..' components in validat… by @xingyug in #331
• fix(models): accept null values in FilesystemInfo for container mount… by @xingyug in #330
• chore(deps): update codecov/codecov-action action to v6 by @renovate[bot] in #332
• docs: fixed sentence in usage.md. by @t0astlabs in #329
• RSPEED-2318: Create set of labeled set of commands for guardrail testing by @Jazzcort in #316
• feat: add Models Corp support for gatekeeper evaluations by @Jazzcort in #323
• chore(deps): update dependency mkdocs-material to v9.7.6 by @renovate[bot] in #318
• chore(deps): update dependency pytest-cov to v7.1.0 by @renovate[bot] in #319
• chore(deps): update astral-sh/setup-uv action to v8 by @renovate[bot] in #338
• fix: Avoid circular reference issue introduced in v2.14.6 by @Jazzcort in #342
• test: add 100% test coverage for check_run_script.py by @owtaylor in #343
• [RSPEED-2384] Add a 'validate_script' toolset by @subpop in #321
• Add comprehensive documentation for Guarded Command execution by @owtaylor in #346
• feat(run_script): add needs_confirmation flow by @owtaylor in #347
• Convert reset_vendor fixture to save sys.modules and sys.path by @subpop in #333
• Use correct Python version in tests by @samdoran in #344
• feat(run_script): simplify tool parameters and merge toolsets by @owtaylor in #349
• Merge main into experiment/guard-command-execution (2026-04-07) by @owtaylor in #350
• Add optional guarded command execution feature by @owtaylor in #351
• chore(deps): update dependency vite to v6.4.2 [security] by @renovate[bot] in #352
• Build with mcp apps by @Jazzcort in #357
• chore(deps): update dependency @modelcontextprotocol/sdk to v1.26.0 [security] by @renovate[bot] in #353
• chore(deps): update dependency @types/node to v22.19.15 by @renovate[bot] in #358
• chore(deps): update dependency autoprefixer to v10.4.27 by @renovate[bot] in #359
• chore(deps): update dependency litellm to v1.83.0 [security] by @renovate[bot] in #354
• chore(deps): update astral-sh/setup-uv action to v8 by @renovate[bot] in #369
• fix: prevent app rendering error causing by data structure change by @Jazzcort in #360
• chore(deps): update dependency @types/node to v24 by @renovate[bot] in #370
• fix(storage): harden read_file against unbounded reads by @xingyug in #335
• chore(deps): update mcp-app/package-lock.json by @owtaylor in #375
• Containerfile: build run-script-app.html by @owtaylor in #372

New Contributors

• @Jazzcort made their first contribution in #242
• @panyamkeerthana made their first contribution in #278
• @xingyug made their first contribution in #331
• @t0astlabs made their first contribution in #329

Full Changelog: 1.3.2...1.4.0