This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryFixed silent hangs in update_vng by splitting timeouts, surfacing errors, and adding diagnostic logs.
Full changelog
Fixed
update_vnghang diagnosis — fallout from the 2026-05-01 g3-prod GPU I/O incident, whereupdate_vngstalled with no visible error and required a manual curl fallback to land the userdata fix:- Split httpx timeout into explicit
connect=10s,read=120s,write=120s,pool=10s(was a single 30s covering all phases). Read/write timeouts overridable viaSPOTINST_HTTP_READ_TIMEOUT/SPOTINST_HTTP_WRITE_TIMEOUT. - Wrap
httpx.TimeoutExceptionintoTimeoutErrorwith method, path, body size, and elapsed time so a hang surfaces as a loud error instead of a silent stall. - Emit stderr log line on every write (
POST/PUT/PATCH/DELETE):method path body_size=N elapsed=X.Ys status=.... Visible in the MCP server's stderr for post-hoc diagnosis. - Raise
ValueErrorwhenaccountIdis neither set via env nor passed explicitly — the Spot API spec requires it and used to fail opaquely.
- Split httpx timeout into explicit
Added
update_vngauto-encodes plaintextuserDatato base64 — per the Spot API spec,userDatamust be base64-encoded. Plaintext bash scripts were the likely root cause of past silent failures. Newencode_user_data=trueparameter (default) base64-encodes when input doesn't already look like base64; setfalseto pass through as-is.update_vngpost-update read-back — the tool now returns{put_result, readback}so callers can verify the change actually landed. Readback errors are captured into_readback_errorwithout re-raising.update_vngauto_apply_tagsparameter — maps to the Spot API'sautoApplyTagsquery param; updates tags without triggering a roll.
Changed
- Stderr logging is emitted only for write operations (reads stay quiet to avoid log spam).
Tests
- Added 10 tests (92 total).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About arnstarn/mcp-server-spotinst
MCP server for Spot.io (Spotinst) API with 23 tools for managing Ocean clusters, VNGs, Elastigroups, costs, right-sizing, and logs across AWS and Azure with multi-account support.
Related context
Beta — feedback welcome: [email protected]