v1.0.27

Summary

This release adds MCP Apps passthrough for multi-server groups and on-demand stdio server spawning to lower memory usage, and improves diagnostics by including upstream stderr in connection errors. It also hardens OAuth handling by stripping static Authorization headers when an OAuth provider is active, cleans up duplicated lockfile entries, and adds unit tests for smartRouting config resolution.

Features

• feat: support MCP Apps passthrough on multi-server groups by @jcollas in #1010
• feat: on-demand stdio server spawning to reduce memory usage by @Rahulsharma0810 in #1012

Fixes

• fix: include upstream stderr in connection errors by @samanhappy in #1015
• fix(oauth): strip static Authorization header when OAuth provider is active by @Rahulsharma0810 in #1013
• fix: remove duplicated semver@7.8.5 entries from lockfile by @samanhappy in #1023
• test: add unit tests for smartRouting config resolution by @FBISiri in #1021
• chore(deps): bump better-sqlite3 from 12.6.2 to 12.11.1 by @app/dependabot in #1016
• chore(deps-dev): bump postcss from 8.5.12 to 8.5.18 by @app/dependabot in #1008
• chore(deps-dev): bump globals from 13.24.0 to 17.8.0 by @app/dependabot in #1017
• chore(deps-dev): bump @typescript-eslint/parser from 8.61.1 to 8.65.0 by @app/dependabot in #1018
• chore(deps-dev): bump tailwind-merge from 3.3.1 to 3.6.0 by @app/dependabot in #1019
• chore(deps-dev): bump @vitejs/plugin-react from 5.1.3 to 5.2.0 by @app/dependabot in #1020

摘要

此版本为多服务器组新增了 MCP Apps 透传支持，并通过按需启动 stdio 服务器来降低内存占用；同时在连接错误中包含上游 stderr，改进了诊断信息。此外，当 OAuth 提供方启用时会移除静态 Authorization 头以加固安全性，清理了 lockfile 中重复的条目，并为 smartRouting 配置解析新增了单元测试。

功能

• 支持多服务器组的 MCP Apps 透传 by @jcollas in #1010
• 按需启动 stdio 服务器以降低内存占用 by @Rahulsharma0810 in #1012

修复

• 修复：连接错误中附带上游 stderr by @samanhappy in #1015
• 修复(oauth)：当 OAuth 提供方启用时移除静态 Authorization 头 by @Rahulsharma0810 in #1013
• 修复：移除 lockfile 中重复的 semver@7.8.5 条目 by @samanhappy in #1023
• 测试：为 smartRouting 配置解析新增单元测试 by @FBISiri in #1021
• chore(deps): 升级 better-sqlite3 从 12.6.2 到 12.11.1 by @app/dependabot in #1016
• chore(deps-dev): 升级 postcss 从 8.5.12 到 8.5.18 by @app/dependabot in #1008
• chore(deps-dev): 升级 globals 从 13.24.0 到 17.8.0 by @app/dependabot in #1017
• chore(deps-dev): 升级 @typescript-eslint/parser 从 8.61.1 到 8.65.0 by @app/dependabot in #1018
• chore(deps-dev): 升级 tailwind-merge 从 3.3.1 到 3.6.0 by @app/dependabot in #1019
• chore(deps-dev): 升级 @vitejs/plugin-react 从 5.1.3 到 5.2.0 by @app/dependabot in #1020

New Contributors

• @jcollas made their first contribution in #1010
• @FBISiri made their first contribution in #1021

References

• chore(deps-dev): bump postcss from 8.5.12 to 8.5.18 by @app/dependabot in #1008
• feat: support MCP Apps passthrough on multi-server groups by @jcollas in #1010
• feat: on-demand stdio server spawning to reduce memory usage by @Rahulsharma0810 in #1012
• fix: include upstream stderr in connection errors by @samanhappy in #1015
• chore(deps): bump better-sqlite3 from 12.6.2 to 12.11.1 by @app/dependabot in #1016
• chore(deps-dev): bump globals from 13.24.0 to 17.8.0 by @app/dependabot in #1017
• chore(deps-dev): bump @typescript-eslint/parser from 8.61.1 to 8.65.0 by @app/dependabot in #1018
• chore(deps-dev): bump tailwind-merge from 3.3.1 to 3.6.0 by @app/dependabot in #1019
• chore(deps-dev): bump @vitejs/plugin-react from 5.1.3 to 5.2.0 by @app/dependabot in #1020
• fix(oauth): strip static Authorization header when OAuth provider is active by @Rahulsharma0810 in #1013
• fix: remove duplicated semver@7.8.5 entries from lockfile by @samanhappy in #1023
• test: add unit tests for smartRouting config resolution by @FBISiri in #1021
• Full changelog: v1.0.26...v1.0.27