Skip to content

v1.3.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Jul 22:14
· 9 commits to main since this release
v1.3.4
7388b7f

Changed

  • rmcp (MCP SDK) 1.6 → 2.2. The server no longer emits MCP logging/message notifications — the logging capability was never advertised, so those notifications were off-spec. Tool progress messages now go to stderr via tracing only.
  • Dependency refresh: quick-xml 0.41, tokio 1.53, regex 1.13, clap 4.6.2, clap_complete 4.6.7. CI actions: actions/checkout v7, schneegans/dynamic-badges-action 1.9.0.

Security

  • quick-xml 0.41 closes RUSTSEC-2026-0194 and RUSTSEC-2026-0195 (quadratic attribute parsing, unbounded namespace allocation).
  • crossbeam-epoch 0.9.20 closes RUSTSEC-2026-0204 (dev-dependency chain).

Fixed

  • CI: nightly clippy lints chunks_exact_to_as_chunks (UTF-16 strings parser) and cloned_ref_to_slice_refs (merger tests) no longer fail the pipeline.
Assets 6
Loading