Skip to content

This release fixes issues for SREs watching stability and regressions.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents ai-tools apple-silicon applescript automation browser-automation
+14 more
claude claude-code cursor devtools llm-tools macos mcp mcp-server model-context-protocol safari safari-mcp web-automation webkit windsurf

Summary

AI summary

Shared HTTP mode now recovers from dropped sessions by returning HTTP 404 instead of wedging with HTTP 400.

Full changelog

Fixed

  • Shared HTTP mode (SAFARI_MCP_HTTP) now self-heals when a session drops. A request with an unknown/expired Mcp-Session-Id returned HTTP 400, wedging the MCP client permanently on "No valid session" — every shared session died the moment its session dropped (idle SSE close, daemon restart, eviction) with no recovery. It now returns HTTP 404 per the StreamableHTTP spec, so the client transparently re-initializes. Regression-tested. (No-session-id + non-initialize still returns 400.)

Patch on top of v2.15.0. stdio (default) users unaffected.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track achiya-automation/safari-mcp

Get notified when new releases ship.

Sign up free

About achiya-automation/safari-mcp

Native Safari browser automation for AI agents with 80+ tools. No Chrome dependency, optimized for Apple Silicon with 60% less CPU overhead.

All releases →

Related context

Earlier breaking changes

  • v2.10.5 npm audit gate now fails build on high or critical advisories.

Beta — feedback welcome: [email protected]