2026.07.20260713210810

2026.07.20260713210810

What's Changed

• fix(healthomics): use batchName parameter in StartRunBatch call by @markjschreiber in #4089
• fix: fastmcp package to 3.2.0 by @scottschreckengaust in #4088
• fix(aurora-dsql-mcp-server): strip SQL comments before regex evaluation to prevent bypass by @pkale in #4029
• chore(codeowners): add spencercorwin as codeowner for aurora-dsql-mcp… by @spencercorwin in #4063
• docs(cloudwatch-mcp-server): remove regional availability disclaimers from PromQL tools by @gcacace in #3999
• fix(aurora-dsql): harden read-only mode against session-state mutation by @anwesham-lab in #4092
• fix(iam-mcp-server): make managed-policy denylist case-insensitive by @oshardik in #4101
• feat(billing-cost-management-mcp-server): add list-invoice-summaries tool for real invoice data with FX/local-currency, tax breakdowns, and PO numbers by @malpani in #4093
• chore: add path validation for params_file to block sensitive file reads by @jade710 in #3807
• chore: add do not release flag temporarily by @arnewouters in #4112
• docs: Add AWS MCP migration guide by @meghagoyal04 in #4114
• fix(mssql-mcp-server,oracle-mcp-server): Hardening secret manager access by making it a CLI parameter by @shreyaskshekhar in #3810
• feat(redshift-mcp-server): use SHOW commands for metadata discovery by @saeedma8 in #4109
• fix(openapi-mcp-server): DNS-pin spec fetches to prevent rebinding SSRF by @scottschreckengaust in #4108
• chore: release/2026.07.20260713210810 by @awslabs-mcp in #4126

New Contributors

• @pkale made their first contribution in #4029
• @spencercorwin made their first contribution in #4063
• @malpani made their first contribution in #4093
• @shreyaskshekhar made their first contribution in #3810
• @saeedma8 made their first contribution in #4109

Full Changelog: 2026.07.20260706214220...2026.07.20260713210810