Commit graph

Select branches

Hide pull requests

main

0.0.1

0.1.0

0.10.2

0.11.0

0.11.0-amended

0.12.0

0.13.0

0.14.0

0.14.1

0.14.2

0.14.3

0.15.0

0.16.0

0.16.1

0.16.2

0.16.3

0.16.4

0.16.5

0.16.6

0.16.7

0.16.8

0.17.0

0.17.1

0.17.2

0.17.3

0.17.4

0.17.5

0.17.6

0.18.0

0.19.0

0.19.0-hotfix

0.2.0

0.2.1

0.2.2

0.2.3

0.2.4

0.2.5

0.2.6

0.2.7

0.20.0

0.21.0

0.21.1

0.21.2

0.21.2-hotfix

0.21.2-hotfix-2

0.21.2-hotfix-3

0.22.0

0.3.0

0.4.0

0.4.1

0.5.1

0.6.0

0.7.0

0.8.0

0.8.1

0.8.1-hotfix

0.8.2

0.9.0

1.0.0

1.0.1

1.0.2

2.0.0

2.0.0-rc.1

2.0.0-rc.2

2.0.0-rc.3

2.1.0

2.2.0

2.3.0

2.4.0

2.5.0

2.6.0

2.7.0

v2-alpha-1

v2-alpha-10

v2-alpha-11

v2-alpha-12

v2-alpha-13

v2-alpha-14

v2-alpha-15

v2-alpha-2

v2-alpha-3

v2-alpha-4

v2-alpha-5

v2-alpha-6

v2-alpha-7

v2-alpha-8

v2-alpha-9

Mono Color

• b35db18fe8 Merge remote-tracking branch 'origin/v2/main' into v2/feat/2082-file-secret-store-lock cliffhall 2026-08-23 11:56:05 -04:00
• e956d49833 fix(auth): lock the snapshot during hand-off, keep quiet on ERELEASED (#2082) cliffhall 2026-08-23 11:54:47 -04:00
• ce29d8273d fix(web): resolve the rollback baseline at failure time, not at issue cliffhall 2026-08-23 11:52:16 -04:00
• c67ea8a002 Merge remote-tracking branch 'origin/v2/main' into v2/fix/2089-pagination-rollback-baseline cliffhall 2026-08-23 11:42:34 -04:00
• 6829b45f60
  Merge pull request #2090 from modelcontextprotocol/v2/chore/2085-max-warnings-zero Cliff Hall 2026-08-23 11:39:27 -04:00
• 7fa42299c7 fix(web): order overlapping settings writes by issue, not by completion cliffhall 2026-08-23 11:34:20 -04:00
• 09e1564672 fix(auth): refuse on a stuck lock, capture identity at the mkdir seam (#2082) cliffhall 2026-08-23 11:31:37 -04:00
• e359368892 fix(web): key the rollback baseline per server, and pair it at completion cliffhall 2026-08-23 11:18:34 -04:00
• b159c75b88 fix(auth): guard every lock removal, not just release, and stop promising expiry (#2082) cliffhall 2026-08-23 11:10:48 -04:00
• 0bcb7ec78a fix(web): roll a failed settings write back to what actually landed cliffhall 2026-08-23 10:54:53 -04:00
• 91e1392c1f fix(auth): stop deleting the winner's lock after a stale takeover (#2082) cliffhall 2026-08-23 10:51:40 -04:00
• 99a194ca69 chore(lint): fail lint on warnings (--max-warnings 0) cliffhall 2026-08-23 10:47:29 -04:00
• 833a6ba76b fix(auth): keep the keychain hand-off non-throwing, and stop overstating the wait (#2082) cliffhall 2026-08-23 10:32:43 -04:00
• 6c1cc6c1ae test(web): cover the settings toast's reload-failure title cliffhall 2026-08-23 10:27:28 -04:00
• b49d4f20f5 fix(web): stop the remaining consumers calling a landed write a failure cliffhall 2026-08-23 10:14:22 -04:00
• dcd70e2f11 fix(auth): stop degrading on ELOCKED, and correct the claim about the lock (#2082) cliffhall 2026-08-23 10:08:12 -04:00
• 269ff5fefc fix(web): follow a rename whose list reload failed, and drop a double cast cliffhall 2026-08-23 09:58:56 -04:00
• 16613b115d fix(auth): address Copilot review round 1 on the secrets-file lock (#2082) cliffhall 2026-08-23 09:49:01 -04:00
• fd21d0d528 fix(web): don't roll back an optimistic setting a failed reload didn't undo cliffhall 2026-08-23 09:39:47 -04:00
• 04dbc36544 feat(auth): give the secrets file a real cross-process lock (#2082) cliffhall 2026-08-23 09:32:41 -04:00
• 4379d17f76 fix(web): surface a failed post-write server-list reload cliffhall 2026-08-23 09:21:46 -04:00
• 7701c68028
  Merge pull request #2076 from modelcontextprotocol/v2/feat/1950-file-secret-store Cliff Hall 2026-08-23 02:01:27 -04:00
• a859093bd3 Merge remote-tracking branch 'origin/v2/main' into v2/feat/1950-file-secret-store cliffhall 2026-08-23 01:40:01 -04:00
• 380268e54c
  Merge pull request #2083 from modelcontextprotocol/v2/feat/1854-app-rendered-elicitations Cliff Hall 2026-08-23 01:29:13 -04:00
• e5c254dbea perf(web): refresh the storage descriptor once per import batch cliffhall 2026-08-23 00:10:10 -04:00
• beaaad4982 fix(apps): make a covered elicitation dialog inert cliffhall 2026-08-23 00:02:37 -04:00
• 1202bd8663 fix(web): list refreshInitialConfig in both persist callbacks' deps cliffhall 2026-08-22 23:52:21 -04:00
• 356e8eaa8a fix(apps): read the settled sandbox URL from a ref at client construction cliffhall 2026-08-22 23:39:08 -04:00
• af3d940e78 fix(auth): stop a config-only PUT deleting stored secrets (#2084) cliffhall 2026-08-22 23:30:17 -04:00
• ce263366b6 fix(apps): tear the app down when the server cancels the elicitation cliffhall 2026-08-22 23:19:23 -04:00
• de84b67046 fix(auth): stop blaming the passphrase for a corrupt payload, and refresh the stale docs cliffhall 2026-08-22 23:08:52 -04:00
• 0f3ee265fc fix(apps): bind app elicitations to the connection that made them cliffhall 2026-08-22 22:55:43 -04:00
• 4ce0643ac1 fix(auth): refresh in finally, bound the KDF parameters, cover the last two writers cliffhall 2026-08-22 22:46:42 -04:00
• 8f14d371ad fix(auth): land the round-20 UI wiring that never applied, and nonce the staging name cliffhall 2026-08-22 22:30:21 -04:00
• d97c9bd391 fix(tasks): tie a receiver task's answer collection to its cancellation cliffhall 2026-08-22 22:29:18 -04:00
• 15e9260484 fix(auth): make the durability guard provenance-aware, and harden the claim cliffhall 2026-08-22 22:10:07 -04:00
• d90c51a04c fix(apps): close the three gaps the review flagged as previously missed cliffhall 2026-08-22 22:05:15 -04:00
• 5ef3572578 fix(auth): stop losing preserved plaintext, and claim the hand-off file atomically cliffhall 2026-08-22 21:34:34 -04:00
• 98d1fe752d fix(apps): gate the capability observer on the bridge's own initialize schema cliffhall 2026-08-22 21:29:55 -04:00
• 469e59a7c4 fix(auth): commit the utility round 17 wired in, and drop a prohibited cast cliffhall 2026-08-22 21:06:47 -04:00
• b86db5c7a2 fix(apps): track the latest accepted app ui/initialize, not the first cliffhall 2026-08-22 21:05:47 -04:00
• 78a65f7c20 fix(auth): address Copilot review round 17 cliffhall 2026-08-22 20:51:23 -04:00
• cc0770babd fix(apps): fail closed on a malformed app ui/initialize cliffhall 2026-08-22 20:45:28 -04:00
• 52087f7739 fix(auth): address Copilot review round 16 cliffhall 2026-08-22 20:31:03 -04:00
• 9b775b0409 docs: document smoke:web:elicit in AGENTS.md cliffhall 2026-08-22 20:26:11 -04:00
• 44010c313b test(apps): cover the modern MRTR leg of app-rendered elicitations cliffhall 2026-08-22 20:17:37 -04:00
• 0ab542cbee fix(auth): order /api/config loads so an older response cannot win cliffhall 2026-08-22 20:14:23 -04:00
• 0c52172379 fix(auth): address Copilot review round 14 cliffhall 2026-08-22 19:56:41 -04:00
• 7c77c2b15f fix(apps): address review of app-rendered elicitations cliffhall 2026-08-22 19:43:44 -04:00
• 26d2f58784 fix(auth): address Copilot review round 13 cliffhall 2026-08-22 19:39:45 -04:00
• bc4b774d80 fix(auth): address Copilot review round 12 cliffhall 2026-08-22 19:09:16 -04:00
• 08fc20a22d feat(apps): negotiated app-rendered form elicitations cliffhall 2026-08-22 19:05:21 -04:00
• 219765efff fix(auth): address Copilot review round 10, and document the concurrency design cliffhall 2026-08-22 18:33:59 -04:00
• 339aea3729 fix(auth): replace the secrets-file lock with optimistic verify-and-retry, and address review round 9 cliffhall 2026-08-22 18:05:26 -04:00
• 37faf1be88 fix(auth): address Copilot review round 8 (four inline findings) cliffhall 2026-08-22 17:41:56 -04:00
• 5f4a6ea09b test(auth): pin the loose-mode test to the mechanism that survived cliffhall 2026-08-22 17:12:29 -04:00
• 6efc65d2af fix(auth): address Copilot review round 7 (five of six findings) cliffhall 2026-08-22 14:57:55 -04:00
• fdeffa1f00 fix(auth): address Copilot review round 6 on the secret-store PR cliffhall 2026-08-22 14:40:29 -04:00
• 1aa1f5a0ca docs(web): attach the footer doc blocks to the functions they describe cliffhall 2026-08-22 14:24:09 -04:00
• decc673a5d fix(auth): address Copilot review round 5, and land the impl its tests need cliffhall 2026-08-22 14:15:35 -04:00
• 71cb7f3eae feat(web): state the file store as a sentence, and copy its path on click cliffhall 2026-08-22 14:05:13 -04:00
• 2d2c787e22 style(web): tighten the in-memory caveat and punctuate the footer cliffhall 2026-08-22 13:56:13 -04:00
• 0cb59cf3fd fix(auth): stop heartbeating a lock that is no longer ours cliffhall 2026-08-22 13:50:40 -04:00
• 050556e1a7 fix(auth): address Copilot review round 4 on the secret-store PR cliffhall 2026-08-22 13:40:32 -04:00
• 6460d1804a style(web): bold the "Secrets:" prefix in the settings-modal footers cliffhall 2026-08-22 13:31:04 -04:00
• b143dd6cbd fix(auth): address Copilot review round 3 on the secret-store PR cliffhall 2026-08-22 13:19:56 -04:00
• de7795ca54 fix(auth): address Copilot review round 2 on the secret-store PR cliffhall 2026-08-22 12:51:14 -04:00
• 3452a63101 fix(auth): address Copilot review on the secret-store PR cliffhall 2026-08-22 12:26:33 -04:00
• bc408f5869 feat(auth): file-backed and in-memory SecretStore for hosts with no keychain cliffhall 2026-08-22 12:06:31 -04:00
• 43525d9ea2
  Merge pull request #2070 from modelcontextprotocol/v2/ci/2069-drop-redundant-pr-checkout Cliff Hall 2026-08-22 10:27:02 -04:00
• f8e97c99a1 ci: drop the redundant PR-head checkout from claude.yml cliffhall 2026-08-20 19:34:41 -04:00
• cc416f0f93
  Merge pull request #1732 from manjunathbhaskar/fix/dns-rebinding-toctou-safeproxyfetch Cliff Hall 2026-08-20 16:17:17 -04:00
• af79614c81
  Merge branch 'v1/main' into fix/dns-rebinding-toctou-safeproxyfetch Cliff Hall 2026-08-20 10:43:53 -04:00
• c4898540be
  Merge pull request #2066 from modelcontextprotocol/v1/chore/2065-workflow-branch-triggers Cliff Hall 2026-08-20 10:41:17 -04:00
• 95fa9a1c58 ci(v1): re-enable the Playwright suite on v1/main cliffhall 2026-08-20 10:22:10 -04:00
• c7dc8f707a ci(v1): pin workflow branch filters to v1/main cliffhall 2026-08-20 09:58:05 -04:00
• fb4a753cd0
  Merge branch 'v1/main' into fix/dns-rebinding-toctou-safeproxyfetch Cliff Hall 2026-08-20 09:45:40 -04:00
• 923c58edec fix(server): pin all validated addresses; keep tests out of the build cliffhall 2026-08-19 17:05:42 -04:00
• 0e1bc1d402 fix(server): make the pinned lookup honor Node's all:true callback shape cliffhall 2026-08-19 16:59:06 -04:00
• 86d5f58ec8
  Merge pull request #2054 from modelcontextprotocol/v2/chore/milestone-merge-v2.3.0 2.3.0 Cliff Hall 2026-08-19 11:02:03 -04:00
• d87b34d466 Merge remote-tracking branch 'origin/v2/main' into v2/chore/milestone-merge-v2.3.0 cliffhall 2026-08-18 23:34:51 -04:00
• 471b86535e
  Merge pull request #2061 from modelcontextprotocol/v2/chore/2058-nanoid-advisory Cliff Hall 2026-08-18 23:29:46 -04:00
• 180b397aec chore(deps): bump nanoid to 3.3.18 to clear the high-severity advisory cliffhall 2026-08-18 23:12:10 -04:00
• 7dc363ee10
  Merge pull request #2059 from modelcontextprotocol/v2/chore/2057-sync-security-deps Cliff Hall 2026-08-18 22:58:22 -04:00
• 1edb4f78c7 chore(deps): sync the security fixes that landed on main cliffhall 2026-08-18 22:20:10 -04:00
• 3719151081 Merge remote-tracking branch 'origin/v2/main' into v2/chore/milestone-merge-v2.3.0 cliffhall 2026-08-18 20:03:07 -04:00
• e37e823116
  Merge pull request #2052 from modelcontextprotocol/v2/chore/2013-bump-2-3-0 Cliff Hall 2026-08-18 19:58:45 -04:00
• 7ea75e94f1 chore: bump version to 2.3.0 cliffhall 2026-08-18 19:37:06 -04:00
• b020709d51
  Merge pull request #2050 from modelcontextprotocol/v2/fix/2049-unhandled-list-reload-rejections Cliff Hall 2026-08-18 12:53:12 -04:00
• 9f42a5ef10 test: narrow the fake-client cast to a single assertion cliffhall 2026-08-18 10:52:24 -04:00
• f96c4583ee fix: handle background command rejections in App (#2049) cliffhall 2026-08-18 10:47:33 -04:00
• 7be5875dc5
  Merge pull request #2047 from modelcontextprotocol/v2/fix/1998-paginated-list-errors Cliff Hall 2026-08-18 08:20:56 -04:00
• de60983ccc fix: surface list-fetch failures in paginated mode (#1998) cliffhall 2026-08-17 20:40:23 -04:00
• 885228699e
  Merge pull request #2045 from modelcontextprotocol/v2/fix/1999-sse-onabort-before-priming Cliff Hall 2026-08-17 19:06:01 -04:00
• e58c80440b fix: guard the abort listener against a double invocation cliffhall 2026-08-17 14:41:24 -04:00
• 86245a4a83
  Merge pull request #2044 from modelcontextprotocol/v2/chore/2043-eslint-ignore-web-build Cliff Hall 2026-08-17 14:35:04 -04:00
• 3dfac1c3db fix: register SSE abort cleanup before the priming write cliffhall 2026-08-17 14:30:58 -04:00
• f8cf39ca4c docs: say two coverage guards, not three cliffhall 2026-08-17 14:18:05 -04:00
• 4fd7f39acf docs: state that build output is never a lint/format/typecheck target cliffhall 2026-08-17 10:14:29 -04:00
• 6b27e5f932 chore: ignore the web client's tsup build output in ESLint cliffhall 2026-08-17 09:45:57 -04:00