This release includes breaking changes for platform teams planning a safe upgrade.
Published 5mo
MCP Developer Tools
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
mcp
mcp-client
mcp-sdk
mcp-server
mcp-servers
rust
Summary
AI summaryWebSocket client requests now correctly route responses without premature timeouts.
Full changelog
[2.3.4] - 2025-12-13
Fixed
WebSocket Transport (turbomcp-transport)
- WebSocket client requests no longer timeout - Fixed critical bug where standard request-response
patterns were never routed to correlation handlers inspawn_message_reader_task(). Responses now
correctly route to thecorrelationsDashMap by matching JSON-RPCidtorequest_id.
Feature Propagation (turbomcp)
mcp-tasksfeature now propagates toturbomcp-server- Previously only propagated to
turbomcp-protocol, causing compilation errors whenmcp-taskswas enabled.
Error Handling (turbomcp-protocol)
std::error::Error::source()now returns the actual source error - Was previously always
returningNonedespite theErrorstruct having asourcefield. Enables proper error chain
introspection for debugging and logging frameworks.
Code Quality
- Removed unused
errorimport inturbomcp-transport/src/axum/middleware/jwks.rs - Replaced
eprintln!debug statements withtracing::errorinturbomcp-dpop/src/proof.rs
Added
Compile-Time Safety (turbomcp-macros)
dbg!macro now detected by stdio safety validation - Prevents accidental stdout writes in
servers using stdio transport. Error message updated to includedbg!in examples.
Changed
Documentation
- Protocol version updated from 2025-06-18 to 2025-11-25 - README now correctly reflects the
actualPROTOCOL_VERSIONconstant used in the codebase. - Added comprehensive Requirements section - Documents Rust 1.89.0+ requirement with
rustc --version
hint for verification. - Added Installation section - Includes
Cargo.tomlandcargo addexamples. - Added Feature Presets documentation - Documents
default,full,full-stack, andnetwork
presets with use cases. - Added Individual Features table - Documents all transport, security, and performance features.
- Fixed 10 failing doctests - Updated examples to include required fields (
task,task_id,
last_updated_at,limit) and correct types (HashMap<String, Value>for arguments). - Updated version references from 2.1 to 2.3 in Quick Start examples.
Full Changelog: https://github.com/Epistates/turbomcp/compare/v2.3.3...v2.3.4
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]