Security fix: passmcp serve takes only safe settings from a request (GHSA-pgc7-p53h-243q): a client_config server with a command no longer starts a program on the host, and --public builds each run from the endpoint, phases, report format and bounded pacing, discarding everything else a caller sends. Runs are bounded and cancelled with the server, and --addr :PORT needs --allow-remote. Affected versions: v0.0.1 to v0.0.6. Upgrade, or stop serve --public until you do.
Security fix: built with Go 1.26.9: twelve standard-library advisories (GO-2026-6599 to GO-2026-6617, nine in net/http) were reachable in binaries built with Go 1.26.8. Affected versions: v0.0.1 to v0.0.6. Masking also covers more: excerpts are masked before they are cut, Proxy-Authorization and password headers count as secrets, and every personal-data field the catalog flags is masked.
Fewer false failures: an unparsable stdio line that a server ignores, as the official SDKs do on purpose, is info rather than a failure, and protocol.deprecated_features asks for initialize the way an older client does.
In lockstep with the passmcp family at 0.0.7, every component released together at one version, with builds for 32-bit Linux and wasm, a Windows stop that ends the server's whole process tree, and third-party licence notices in every archive.