v1.18.0-beta.1
Pre-releasev1.18.0-beta.1 (2026-06-10)
Bug Fixes
-
Harden mcp_core.http SSRF guard (unspecified-address block + single-hop async DNS) (#433,
fb8aee8) -
Harden mcp_core.llm.catalog (mode-less registry entries + empty-hints message) (#433,
fb8aee8) -
Omit None credentials from litellm kwargs (env-fallback suppression) + sync wrapper warnings (#433,
fb8aee8)
Features
-
Add mcp_core.http SSRF guard (DNS-pinned transport + api_base policy) (#433,
fb8aee8) -
Add mcp_core.llm dispatch passthrough wrappers (async + sync mirrors) (#433,
fb8aee8) -
Add mcp_core.llm.catalog (capability check + model listing, graceful-on-missing) (#433,
fb8aee8) -
Mcp_core.llm passthrough primitive + mcp_core.http SSRF guard (#433,
fb8aee8) -
Wire mcp-core[llm] optional extra + CI extras legs (#433,
fb8aee8)
Detailed Changes: v1.17.5-beta.3...v1.18.0-beta.1