1.6.0

Breaking Changes

In 1.6.0 we've dropped our dependency on LiteLLM in favor of directly implementing our own client for inference APIs. This greatly reduces our dependency stack and eases maintenance. Because of this, the way of configuring the gatekeeper model for [Guarded Command Execution](https://rhel-lightspeed.github.io/linux-mcp-server/model changed. Instead of setting:

LINUX_MCP_GATEKEEPER__MODEL=openai/gpt-5.4

Set:

LINUX_MCP_GATEKEEPER__PROVIDER=openai
LINUX_MCP_GATEKEEPER__MODEL=gpt-5.4

Not all backends supported by LiteLLM are supported by the new code - if you were counting on support for a model provider that no longer works, please open an issue.

Change by @subpop.

Security Fixes

This release contains two Moderate severity security fixes for Guarded Command Execution. If you are using Guarded Command Execution (off by default, enabled by LINUX_MCP_SERVER_TOOLSET=run_script or LINUX_MCP_SERVER_TOOLSET=both), it is recommended that you upgrade immediately.

GHSA-gx3q-f66w-jhp9: Gatekeeper prompt injection via unsanitized description field . Thanks to Vo Phu Vinh (@fortress07) for finding the problem and developing a fix!
GHSA-7f2q-wwpq-mmhq: Sandbox not properly enabled for read-only commands

Other changes

• The user interface for our MCP App is now static HTML instead of a React application. This greatly simplifies building the application from source. [@owtaylor]
• Tools that retrieve journal logs now support first_lines and last_lines parameters, instead of a confusing lines parameter. [@panyamkeerthana]

Full Changelog

• ci: Upgrade to the latest mcp-publisher version by @owtaylor in #524
• mcp-app: replace React/Vite/npm with static HTML+CSS+JS by @owtaylor in #525
• chore(deps): update dependency google-cloud-aiplatform to v1.159.0 by @renovate[bot] in #527
• chore(deps): update other non-major updates by @renovate[bot] in #529
• eval: fix eval script to clear reasoning_effort and export template kwarg by @Jazzcort in #533
• functional-tests: replace /retest comment with ok_to_test label by @owtaylor in #522
• chore(deps): update dependency fastmcp to v3.4.4 by @renovate[bot] in #514
• chore(deps): pin actions/github-script action to 3a2844b by @renovate[bot] in #535
• chore(deps): update actions/setup-python action to v7 by @renovate[bot] in #538
• chore(deps): update non-major python updates by @renovate[bot] in #537
• chore(deps): update other non-major updates by @renovate[bot] in #536
• fix: split lines parameter into first_lines and last_lines by @panyamkeerthana in #534
• chore(deps): update dependency fastmcp to v3.4.5 by @renovate[bot] in #544
• chore(deps): update astral-sh/setup-uv action to v9 by @renovate[bot] in #542
• refactor(gatekeeper): Drop LiteLLM by @subpop in #494
• chore(deps): update dependency google-auth to v2.56.3 by @renovate[bot] in #541
• Repoint Konflux configuration and update Konflux pipeline by @owtaylor in #555
• chore(deps): update quay.io/fedora/fedora docker tag to v46 by @red-hat-konflux-kflux-prd-rh02[bot] in #551
• chore(deps): pin registry.redhat.io/ubi10/s2i-base docker tag to 2475fef by @red-hat-konflux-kflux-prd-rh02[bot] in #546
• chore(deps): update dependency fastmcp to v3.4.7 by @red-hat-konflux-kflux-prd-rh02[bot] in #548
• chore(deps): update dependency pydantic-settings to v2.15.0 by @red-hat-konflux-kflux-prd-rh02[bot] in #550
• CI: remove gitlab PR mirroring and CI by @owtaylor in #558
• chore(deps): update other non-major updates by @red-hat-konflux-kflux-prd-rh02[bot] in #549
• chore(deps): lock file maintenance by @red-hat-konflux-kflux-prd-rh02[bot] in #552
• renovate.json: drop grouping by @owtaylor in #557
• chore(deps): update astral-sh/setup-uv action to v10 by @red-hat-konflux-kflux-prd-rh02[bot] in #562
• chore(deps): update all non-major dependencies by @red-hat-konflux-kflux-prd-rh02[bot] in #565
• Pin FastMCP to version 3 by @owtaylor in #566
• chore(deps): update konflux references by @red-hat-konflux-kflux-prd-rh02[bot] in #560
• chore(deps): lock file maintenance by @red-hat-konflux-kflux-prd-rh02[bot] in #563
• Build our container hermetically from source by @owtaylor in #564
• chore (deps): update Konflux requirements by @owtaylor in #569
• chore(deps): refresh rpm lockfiles [SECURITY] by @red-hat-konflux-kflux-prd-rh02[bot] in #572

New Contributors

• @red-hat-konflux-kflux-prd-rh02[bot] made their first contribution in #551

Full Changelog: 1.5.0...1.6.0