What's Changed
Fixed
- [#697] OAuth: accept native loopback redirect ports (RFC 8252): Native apps like OpenCode register a loopback redirect URI (e.g.
http://127.0.0.1) without a port, then listen on an ephemeral port chosen at runtime. The authorization server now matches loopback URIs by scheme and host only, ignoring the port, per RFC 8252 §7.3. Previously the port mismatch caused authorization to fail for native app clients. (+109 test lines) - [#704] CLI: import missing
generate_content_hashin ingestion:memory ingest-documentwas silently storing 0 chunks due to aNameErrorongenerate_content_hashinsrc/mcp_memory_service/cli/ingestion.py. - [#705] Server:
--sse-host/--sse-portCLI flags now take effect: Config module constants were frozen at import time, so the flags had no effect on the transport's bind address. The transport now re-reads the environment at startup.
Changed
- [#707] CI: bump
docker/metadata-action5 → 6 - [#708] CI: bump
docker/build-push-action5 → 7 - [#709] CI: bump
docker/setup-buildx-action3 → 4
Test Coverage
1,547 Python tests passing.
Full Changelog
See CHANGELOG.md for complete details.
Full diff: v10.38.0...v10.38.1