A hardening release: Valkey-backed OAuth storage now survives connection drops and gets a real readiness probe, Chat search is honest about how much it searched, and several dependency floors move up for security advisories.
What's Changed
- core / auth: Valkey OAuth storage reconnects and retries after connection failures, with configurable TLS and timeouts, and a new
/health/readyreadiness probe returns503when OAuth storage is unreachable or slower thanWORKSPACE_MCP_READINESS_TIMEOUT_SECONDS(default1)./healthstays a pure liveness check, so point readiness at/health/readyto drain an instance instead of restarting it - bug: Valkey patch by @taylorwilsdon in #1204 - gchat:
search_messagesnow says it searched "the first N accessible spaces" when the space list was truncated, instead of claiming it covered all of them - fix(gchat): say how many spaces search_messages searched by @ConnorMoss02 in #1200 - deps:
oauthlib3.3.1 -> 4.0.0, now also pinned as a transitive floor for GHSA-hj66-6f7g-4r5v (revocation endpoint JSONP injection) - chore(deps): bump oauthlib from 3.3.1 to 4.0.0 in the uv group across 1 directory by @dependabot[bot] in #1209 - deps: Security floors raised for
urllib3(>=2.8.0),pyjwt(>=2.15.0) andpypdf(>=6.19.0)
Full Changelog: v1.30.0...v1.30.1