Skip to content

0.39.1-alpha

Pre-release
Pre-release

Choose a tag to compare

View all tags
@Avi-Robusta Avi-Robusta released this 16 Aug 12:38
· 1 commit to master since this release
0.39.1-alpha
5cdc5e7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • ROB-878 remove stale Sonnet 4.0/4.5 model recommendations from docs by @Sheeproid in #2378
  • Remove experimental Azure SQL toolset by @moshemorad in #2377
  • ROB-893 Fix command injection vulnerability in Kubernetes toolset by @naomi-robusta in #2382
  • Remove MariaDB MCP integration, consolidate to native MariaDB datasource by @moshemorad in #2389
  • Fix command injection in slab/kubevela/inspektor_gadget/aks toolsets (ROB-893 follow-up) by @naomi-robusta in #2386
  • Fix SSRF in internet/fetch_webpage and connectivity_check toolsets (ROB-896) by @naomi-robusta in #2385
  • Harden kubectl-run toolset: run commands without a host shell by @Sheeproid in #2391
  • Add LLM eval for AKS --query command injection by @naomi-robusta in #2393
  • bash toolset: validate command arguments & redirections, not just the prefix by @Sheeproid in #2388
  • Sign bash session-approval prefixes to prevent forgery attacks by @moshemorad in #2394
  • Update GitLab MCP to v2.1.46 and use whoami health check by @moshemorad in #2398
  • ROB-424 ROB-425 ROB-665: fix compaction on Bedrock Converse gateways (tools-attached summarization, user-role summary) by @moshemorad in #2214
  • Improve shell injection security in GitHub Actions workflows by @moshemorad in #2399

Full Changelog: 0.39.0...0.39.1-alpha

Contributors

Sheeproid, moshemorad, and naomi-robusta
Assets 5
Loading