What's Changed
⚠️ Breaking Changes
- fetch / install: the
<ref>and<path>of GitHub/GitLab/tree/...and/blob/...source URLs are now percent-decoded once. A URL whose ref or path holds malformed percent-encoding (e.g. a bare100%) or decodes to a..segment (e.g...%2Fx) is now rejected with a descriptive error instead of being passed through by @521Peter in #3401 and @dyoshikawa in #3404 - OpenCode / MiMo Code MCP import: a non-boolean
disabledvalue is now rejected by the schema instead of being read as enabled. On OpenCode, untyped V2mcp.serversenvelope entries are rejected, invalid timeout objects andoauth.auth_server_metadata_urlare dropped with a warning, and envelope entries that conflict with a flat entry of the same name are reported by @dyoshikawa in #3373 and #3405
Features
- feat(opencode): read the OpenCode V2
mcp.serversenvelope and timeout objects on import by @dyoshikawa in #3373
Bug Fixes
- fix(fetch): decode source URL refs and paths by @521Peter in #3401
- fix(fetch): reject malformed escapes and
..paths in source URLs by @dyoshikawa in #3404 - fix(opencode): tighten OpenCode V2 MCP lowering, sanitize its warnings, and warn when generate flattens a V2
mcpblock by @dyoshikawa in #3405
Other Changes
- chore: update Homebrew formula to v32.0.0 by @dyoshikawa in #3399
Contributors
Full Changelog: v32.0.0...v33.0.0