This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+9 more
Summary
AI summaryFixed concurrent JSON‑RPC responses dropping in the MCP Java SDK.
Full changelog
Parallel STDIO Reliability Patch — prevents concurrent MCP tool completions from dropping a
JSON-RPC response and leaving agents waiting until timeout.
Changed
- GitHub Actions refresh: upgraded the official checkout, Java/Python setup, cache, artifact
upload, Docker login, and pull-request actions to their current supported majors. - Release metadata and documentation: aligned the POM, MCP server metadata, build-script
fallbacks, registry manifest, and documented protocol version for the 3.1.2 release. The two
Maven 3.9.16 components now share one version property.
Fixed
- Concurrent stdio responses dropped by the MCP Java SDK: parallel tool calls could complete on
different threads and race while emitting to the SDK's unicast response sink, causingFailed to enqueue message, a missing JSON-RPC response, and cancellation/interruption noise in other
in-flight Maven Central and OSV work. The stdio profile now serializes only the final response-send
subscriptions while leaving tool execution concurrent (upstream issue
modelcontextprotocol/java-sdk#686).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About arvindand/maven-tools-mcp
Universal Maven Central dependency intelligence for JVM build tools (Maven, Gradle, SBT, Mill). Features bulk operations, version comparison, stability filtering, dependency age analysis, release patterns, and Context7 integration for upgrade guidance.
Related context
Related tools
Earlier breaking changes
- v3.0.0 Java toolchain upgraded from Java 24 to Java 25 (LTS); builds now require Java 25.
Beta — feedback welcome: [email protected]