This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryFixed clean installs that were failing due to missing transport.js file.
Full changelog
Fixed — clean installs were broken since 2.14.0
index.js imports ./transport.js, but the file was missing from the package.json files allowlist, so every published tarball from 2.14.0 through 2.15.1 omitted it. A fresh npx safari-mcp (no local git checkout) exited immediately with ERR_MODULE_NOT_FOUND and the MCP client saw "Connection closed". transport.js is now published.
Thanks to @e3nemyMine for the precise, fully-diagnosed report (#50).
Workaround for older releases: pin [email protected].
Internal
- Added
test/packaging.test.mjs— asserts every relative import in a published JS file is itself published, so an imported-but-unshipped file turns CI red instead of shipping a broken tarball.
Full Changelog: https://github.com/achiya-automation/safari-mcp/compare/v2.15.1...v2.15.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About achiya-automation/safari-mcp
Native Safari browser automation for AI agents with 80+ tools. No Chrome dependency, optimized for Apple Silicon with 60% less CPU overhead.
Related context
Earlier breaking changes
- v2.10.5 npm audit gate now fails build on high or critical advisories.
Beta — feedback welcome: [email protected]