This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryRemoved the --marionette-host CLI parameter and switched connect‑existing mode to use Selenium's native --connect-existing feature.
Full changelog
Added
evaluate_privileged_scriptnow detectsconst/let/varstatements and rejects them with a helpful error message suggesting IIFE workaround- BiDi console and network events now degrade gracefully when Firefox Remote Agent is not running, instead of crashing
- Comprehensive e2e scenario integration tests covering the full
FirefoxClientAPI - Unit tests for privileged context state consistency and statement detection
- Testing documentation (
docs/testing.md)
Fixed
- Privileged context state not preserved across tool calls:
set_firefox_prefsandlist_extensionsno longer silently revert a privileged context selection - Session cleanup on connection failure:
getFirefox()now closes the failed instance to prevent zombie geckodriver processes and Marionette session locks
Changed
- Breaking: Removed
--marionette-hostCLI parameter (connect-existing mode now uses localhost only) - Rewrote connect-existing mode to use Selenium's native
--connect-existingfeature viaServiceBuilder, replacing the customGeckodriverHttpDriverHTTP client (~530 lines removed) - Replaced custom
IDriver/IElement/IBiDiinterfaces with nativeWebDriver/WebElementfrom selenium-webdriver - Improved error messages for BiDi-dependent features (console/network) to suggest
--remote-debugging-port - Pinned all dependency versions for build reproducibility
- Updated dependencies:
@modelcontextprotocol/sdk1.29.0,tsup8.5.0,tsx4.21.0,typescript-eslint8.58.0
Full Changelog: https://github.com/mozilla/firefox-devtools-mcp/compare/0.9.1...0.9.2
Breaking Changes
- Removed `--marionette-host` CLI parameter; connect‑existing mode now binds to localhost only.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About freema/firefox-devtools-mcp
Firefox browser automation via WebDriver BiDi for testing, scraping, and browser control. Supports snapshot/UID-based interactions, network monitoring, console capture, and screenshots.
Related context
Beta — feedback welcome: [email protected]