Skip to content

v2.25.0

Choose a tag to compare

View all tags
@blisspixel blisspixel released this 25 Oct 08:44
· 26 commits to main since this release
v2.25.0
22f8cc4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Make MCP DNS collection work without setup, over encrypted DNS by default.

Changed

  • MCP DNS collection now works without setup on hosts whose resolver is not
    Cloudflare or Google. Instead of reporting an unavailable capability, the
    server binds encrypted Cloudflare DNS-over-HTTPS (cloudflare-dns.com via
    1.1.1.1 and 1.0.0.1). Saved RECON_DNS_* settings and a recognized public
    service in host configuration still take precedence, the host's enterprise or
    stub resolver is still never used, and failures still never fall back.
    RECON_DNS_VIEW=none disables DNS-dependent MCP tools; partial or invalid
    settings stay unavailable rather than silently using the default. Trusted CLI
    resolution is unchanged.

Documentation

  • Renumber the duplicate MCP DNS-view ADR to ADR-0019, record the encrypted
    default as an amendment, and list it in the ADR index. Mark closed issues in
    dated review records and note the live Best Practices result in the badge
    worksheet.

Tool Surface Changes

Tool surface changes: no CLI command or flag changes. No MCP tool, resource or
prompt name changes. The MCP DNS capability declaration keeps its fields; its
unavailable setup text now points at fixing or removing RECON_DNS_* settings.

Assets 6
Loading