This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryFixed tab index overflow causing unintended retargeting of sessions.
Full changelog
Fixed
A tracked tab index past the end of the window no longer retargets the session at a user tab.
When the tracked index exceeded the window's tab count — the user closed a tab, or tore one into its own window — resolveActiveTab() clamped the index to the last tab in the window. That tab is whatever the user happens to have open there. Every subsequent navigate/click/fill then landed on it, destroying page state (#54).
The clamp predates the identity marker (window.name / __mcpTabMarker, shipped in v2.8.3) and was never rewired when its neighbouring branches were. It now fails closed like they do: the session drops ownership and returns null instead of guessing (#59).
Also in this release: the missing CHANGELOG entry for 2.15.3 (tab-fronted clicks, ARIA combobox typeahead, focus-helper FIFO alignment) has been backfilled.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About achiya-automation/safari-mcp
Native Safari browser automation for AI agents with 80+ tools. No Chrome dependency, optimized for Apple Silicon with 60% less CPU overhead.
Related context
Earlier breaking changes
- v2.10.5 npm audit gate now fails build on high or critical advisories.
Beta — feedback welcome: [email protected]