github samanhappy/mcphub v1.0.19

latest release: v1.0.20
4 hours ago

Summary

This release hardens server management reliability with fixes across pagination, state broadcasts, process lifecycle, and serialization, and introduces config-gated verbatim tool call payload storage.

Features

  • Store tool call payloads verbatim, gated by a config switch by @samanhappy in #944

Fixes

  • Record system-key user in activity logs and reserve usernames by @samanhappy in #934
  • Skip HF tokenizer download for short queries in Smart Routing by @samanhappy in #936
  • Block SSRF via URL/OpenAPI servers with owner-aware egress filter by @samanhappy in #937
  • Filter servers across all pages, not just the current page by @samanhappy in #941
  • Scope server toggle to target instead of re-initializing the fleet by @samanhappy in #942
  • Broadcast list changes after upstream data is loaded, not before by @samanhappy in #943
  • Only flag true cycles, not diamond/shared refs, in safe serialization by @samanhappy in #945

摘要

此版本通过修复分页、状态广播、进程生命周期和序列化方面的问题来增强服务器管理的可靠性,并新增了可配置开关控制的工具调用负载原文存储功能。

功能

  • 支持通过配置开关控制工具调用负载原文存储 by @samanhappy in #944

修复

  • 在活动日志中记录系统密钥用户并保留用户名 by @samanhappy in #934
  • 智能路由中跳过短查询的 HF tokenizer 下载 by @samanhappy in #936
  • 通过基于所有者的出口过滤器阻止 SSRF 攻击 by @samanhappy in #937
  • 跨所有页面过滤服务器,而非仅当前页面 by @samanhappy in #941
  • 将服务器切换范围限定为目标服务器,而非重新初始化整个舰队 by @samanhappy in #942
  • 在上游数据加载完成后再广播列表变更 by @samanhappy in #943
  • 安全序列化中仅标记真正的循环引用,而非菱形/共享引用 by @samanhappy in #945

References

  • fix: record system-key user in activity logs and reserve usernames (#886) by @samanhappy in #934
  • fix: skip HF tokenizer download for short queries in Smart Routing (#935) by @samanhappy in #936
  • fix: block SSRF via URL/OpenAPI servers with owner-aware egress filter by @samanhappy in #937
  • fix: filter servers across all pages, not just the current page by @samanhappy in #941
  • fix: scope server toggle to target instead of re-initializing the fleet by @samanhappy in #942
  • fix: broadcast list changes after upstream data is loaded, not before by @samanhappy in #943
  • feat: store tool call payloads verbatim, gated by a config switch by @samanhappy in #944
  • fix: only flag true cycles, not diamond/shared refs, in safe serialization by @samanhappy in #945
  • Full changelog: v1.0.18...v1.0.19

Don't miss a new mcphub release

NewReleases is sending notifications on new releases.