This release includes breaking changes for platform teams planning a safe upgrade.
Published 7mo
MCP Developer Tools
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
mcp
mcp-client
mcp-sdk
mcp-server
mcp-servers
rust
Summary
AI summaryFixed critical bug where resources could not be read due to mismatched registration and lookup keys.
Full changelog
Fixed
- Resource Reading Broken: Fixed critical bug where resources could be listed but not read
- Issue: Resources were registered by method name but looked up by URI, causing "Resource not found" errors
- Root Cause:
#[server]macro registered resources usingresource_nameinstead ofresource_uri_templateas the DashMap key - Impact: All
resources/readrequests failed with -32004 error even for valid resources - Fix: Changed registration in
turbomcp-macros/src/server.rs:436to use URI as key - Location:
crates/turbomcp-macros/src/server.rs:436 - Example:
#[resource("stdio://help")]now registers with key "stdio://help" not "help" - Breaking Change: No - this was a bug preventing correct MCP behavior
- Regression Test: Added
test_resource_registration_lookup_by_urito prevent future regressions - Reported By: turbomcpstudio dogfood team via RESOURCE_READ_ISSUE.md
- Severity: Critical - Completely broke resource reading functionality
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]