What's Changed
- ROB-878 remove stale Sonnet 4.0/4.5 model recommendations from docs by @Sheeproid in #2378
- Remove experimental Azure SQL toolset by @moshemorad in #2377
- ROB-893 Fix command injection vulnerability in Kubernetes toolset by @naomi-robusta in #2382
- Remove MariaDB MCP integration, consolidate to native MariaDB datasource by @moshemorad in #2389
- Fix command injection in slab/kubevela/inspektor_gadget/aks toolsets (ROB-893 follow-up) by @naomi-robusta in #2386
- Fix SSRF in internet/fetch_webpage and connectivity_check toolsets (ROB-896) by @naomi-robusta in #2385
- Harden kubectl-run toolset: run commands without a host shell by @Sheeproid in #2391
- Add LLM eval for AKS --query command injection by @naomi-robusta in #2393
- bash toolset: validate command arguments & redirections, not just the prefix by @Sheeproid in #2388
- Sign bash session-approval prefixes to prevent forgery attacks by @moshemorad in #2394
- Update GitLab MCP to v2.1.46 and use whoami health check by @moshemorad in #2398
- ROB-424 ROB-425 ROB-665: fix compaction on Bedrock Converse gateways (tools-attached summarization, user-role summary) by @moshemorad in #2214
- Improve shell injection security in GitHub Actions workflows by @moshemorad in #2399
Full Changelog: 0.39.0...0.39.1-alpha