This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryShared HTTP mode now recovers from dropped sessions by returning HTTP 404 instead of wedging with HTTP 400.
Full changelog
Fixed
- Shared HTTP mode (
SAFARI_MCP_HTTP) now self-heals when a session drops. A request with an unknown/expiredMcp-Session-Idreturned HTTP 400, wedging the MCP client permanently on"No valid session"— every shared session died the moment its session dropped (idle SSE close, daemon restart, eviction) with no recovery. It now returns HTTP 404 per the StreamableHTTP spec, so the client transparently re-initializes. Regression-tested. (No-session-id + non-initializestill returns 400.)
Patch on top of v2.15.0. stdio (default) users unaffected.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About achiya-automation/safari-mcp
Native Safari browser automation for AI agents with 80+ tools. No Chrome dependency, optimized for Apple Silicon with 60% less CPU overhead.
Related context
Earlier breaking changes
- v2.10.5 npm audit gate now fails build on high or critical advisories.
Beta — feedback welcome: [email protected]