Skip to content

v0.5.2

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 Oct 03:57
· 32 commits to main since this release
v0.5.2
4b3f4d1

Security patch / 安全补丁

  • Require independent, persistent startup approval for MCP stdio programs. Bind trust to the workspace, server and frozen launch configuration; reject stale approval and revoke live capability bindings and connections.

  • Reject all non-loopback plaintext MCP HTTP endpoints before sending credentials. Require separate approval for loopback HTTP, pin localhost connections to loopback, retain HTTPS certificate validation and block every redirect across SDK requests, including SSE.

  • Stop headless CLI/SDK runs with interaction_required before model requests when enabled MCP servers need startup approval. Redact launch arguments, authentication values and endpoint queries from diagnostics.

  • Add independent IANA address boundary/format regressions and reject scoped IPv6 in the public Web network layer. Retain DNS binding and TLS identity protections.

  • MCP stdio 服务需要独立、按工作区持久保存的启动批准；配置变化或过期预览不能沿用授权，撤销使活动工具绑定失效并关闭服务。

  • 非回环明文 HTTP 全部拒绝，本机 HTTP 单独批准；localhost 固定连接回环，HTTPS 保留证书校验，SDK 各请求路径与 SSE 均禁止重定向。

  • 非交互 CLI/SDK 缺少启动信任时，在模型请求前返回 interaction_required；诊断中脱敏启动参数、认证值和端点查询。

  • 补充独立 IANA 地址边界和格式回归，公共 Web 拒绝 scoped IPv6，并保留 DNS 绑定与 TLS 身份验证。

Upgrade notes / 升级说明

Existing stdio configurations are not automatically trusted. Review each service with /mcp trust <server>, then use /mcp reconnect. Loopback HTTP requires its own exception. Startup approval permits the program to run with the host user's permissions; this patch does not add an MCP process sandbox or verify the integrity of its program or dependencies.

既有 stdio 配置不会自动变为可信。请使用 /mcp trust <server> 审阅批准，再 /mcp reconnect；本机 HTTP 也需独立批准。启动批准仍代表宿主用户权限，本补丁不提供 MCP 进程沙箱或程序与依赖完整性验证。

Validation / 验证

Local typecheck, lint, full tests and build passed. The real Windows Terminal fixture covered approval, cancellation, revocation and resize. GitHub Actions validated the tagged candidate on Windows and Ubuntu. Test skips retain their platform limitations.

本地类型检查、lint、全量测试及构建通过；真实 Windows Terminal fixture 完成批准、取消、撤销与 resize 验收；对应候选通过 Windows/Ubuntu GitHub Actions。平台跳过仍保留其验证限制。

Full changelog / 完整变更

Assets 2
Loading