Release v0.8.0

What's Changed

• deps: bump hyper from 1.11.1 to 1.12.0 by @dependabot[bot] in #761
• deps: bump proptest from 1.11.0 to 1.12.0 by @dependabot[bot] in #763
• deps: bump tokio-util from 0.7.19 to 0.7.20 by @dependabot[bot] in #760
• deps: bump serde_json from 1.0.151 to 1.0.154 by @dependabot[bot] in #769
• deps: bump toml from 1.1.6+spec-1.1.0 to 1.1.8+spec-1.1.0 in /fuzz by @dependabot[bot] in #762
• deps: bump serde_json from 1.0.151 to 1.0.154 in /fuzz by @dependabot[bot] in #767
• deps: bump tokio-util from 0.7.19 to 0.7.20 in /fuzz by @dependabot[bot] in #766
• ci: bump github/codeql-action/init from 4.38.2 to 4.38.3 by @dependabot[bot] in #759
• ci: bump cargo-bins/cargo-binstall from 1.25.1 to 1.25.3 by @dependabot[bot] in #764
• ci: bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #765
• ci: bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #768
• ci: bump github/codeql-action/analyze from 4.38.3 to 4.39.0 by @dependabot[bot] in #770
• deps: bump tokio from 1.53.2 to 1.53.3 in /fuzz by @dependabot[bot] in #771
• deps: bump schemars from 1.2.2 to 1.2.3 in /fuzz by @dependabot[bot] in #774
• refactor(core): errors, lanes, diagnostics delivery, bounded echoes and shared request paths by @bug-ops in #778
• feat(core)!: harden untrusted launcher, cancel LSP requests, sweep subscribed diagnostics by @bug-ops in #784
• deps: bump schemars from 1.2.2 to 1.2.3 by @dependabot[bot] in #772
• deps: bump tokio from 1.53.2 to 1.53.3 by @dependabot[bot] in #773
• feat(core)!: harden untrusted launcher, open-then-verify file access and diagnostics sweep by @bug-ops in #790
• fix(core): harden untrusted file open, launcher operands, sweep didSave and config limits by @bug-ops in #794
• test(e2e): retry hover while rust-analyzer is still indexing by @bug-ops in #795
• ci: bump taiki-e/install-action from 2.87.26 to 2.87.28 by @dependabot[bot] in #775
• docs(specs): add bridge specs 015 and 016 by @bug-ops in #808
• fix(core): rework sweep pulls, restart refusal and launcher typing by @bug-ops in #811
• docs(specs): add mcp spec 019 for MCP registry listing by @bug-ops in #822
• fix(core): close sweep, restart, schema and config follow-ups after #811 by @bug-ops in #823
• fix(core): redact secrets in Debug, walk macOS opens, add index coverage note by @bug-ops in #826
• release: v0.8.0 by @bug-ops in #827

Full Changelog: v0.7.0...v0.8.0

Installation

Binary Installation

Download the appropriate binary for your platform from the assets below:

• Linux x86_64: mcpls-x86_64-unknown-linux-gnu.tar.gz
• Linux aarch64: mcpls-aarch64-unknown-linux-gnu.tar.gz
• macOS x86_64: mcpls-x86_64-apple-darwin.tar.gz
• macOS ARM64: mcpls-aarch64-apple-darwin.tar.gz
• Windows x64: mcpls-x86_64-pc-windows-msvc.zip
• Windows ARM64: mcpls-aarch64-pc-windows-msvc.zip

Extract and add to your PATH:

# Linux/macOS
tar xzf mcpls-*.tar.gz
sudo mv mcpls /usr/local/bin/

# Verify installation
mcpls --version

Cargo Installation

cargo install mcpls

Claude Code Integration

Add to ~/.claude/claude_desktop_config.json:

{
  "mcpServers": {
    "mcpls": { "command": "mcpls", "args": [] }
  }
}

Checksums

SHA256 checksums are available for all artifacts (.sha256 files).