This release includes 2 security fixes for security teams reviewing exposed deployments.
Topics
+1 more
Affected surfaces
Summary
AI summaryMultiple news and diagnostic tools were consolidated into unified commands.
Full changelog
TLDR: This release primarly focuses on tool consolidation along with enhanced security, and improved system diagnostics.
🚀 New Features & Major Consolidations
- Unified News System: Consolidated multiple news tools into fetch_news, supporting latest, critical, and since-update queries.
- System Diagnostics: Merged failed services and boot log tools into a single diagnose_system tool.
- Storage Analysis: Unified disk usage and pacman cache statistics into analyze_storage.
- Security Auditing: Consolidated PKGBUILD analysis and metadata risk assessment into audit_package_security.
- Package Management:
- Unified package removal and orphan management into remove_packages and manage_orphans.
- Consolidated file ownership and install reason tools for better package organization.
- Mirror Management: Smart mirror management tool optimize_mirrors now handles status, speed tests, suggestions, and health checks in one place.
- System Health Check: Added a comprehensive run_system_health_check tool that integrates multiple diagnostics for a complete system overview.
🛠 Enhancements
- Tool Metadata & Categorization: Implemented a robust categorization system (Discovery, Lifecycle, Security, etc.) with 28 registered tools, improving discoverability for MCP clients.
- Improved Annotations: Added detailed examples and recovery hints to all tool descriptions and error messages.
- Configuration Focus: Added a focus parameter to analyze_pacman_conf, allowing targeted analysis of ignored packages or parallel download settings.
- Log Parsing: Improved pacman log parsing and error handling across the entire codebase.
- HTTP Support: Added http extras and scripts to support running the server over HTTP/SSE (Server-Sent Events) for platforms like Smithery.
🛡 Security & Safety
- AUR Safety Warnings: Enhanced safety notices for all AUR-related operations.
- Secure Installation: install_package_secure now performs even more rigorous checks before allowing AUR installations.
📝 Documentation & Infrastructure
- Opencode Integration: Added specific instructions and configurations for Opencode users.
- CI/CD Automation: Streamlined the publishing workflow for PyPI and GHCR (multi-arch support).
⚠️ Breaking Changes (v3.0.0 → v3.4.0)
- Tool Deprecation: Many individual tools (e.g., check_disk_space, get_boot_logs) have been removed in favor of their consolidated counterparts (analyze_storage, diagnose_system). AI assistants should be prompted to use the new unified tools.
- Resource URI Updates: Several resource URIs have been updated to match the new module structure.
Full Changelog: https://github.com/nihalxkumar/arch-mcp/compare/v3.0.0...v3.4.0
Breaking Changes
- Removed many individual tools (e.g., check_disk_space, get_boot_logs) in favor of consolidated counterparts analyze_storage and diagnose_system.
- Updated resource URIs to match the new module structure.
Security Fixes
- install_package_secure performs more rigorous checks before allowing AUR installations.
- AUR Safety Warnings enhanced for all AUR-related operations.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About nihalxkumar/arch-mcp
Arch Linux MCP Server to the Arch Linux ecosystem of the Arch Wiki, AUR, and official repositories for AI-assisted Arch Linux usage on Arch and non-Arch systems. Features include searching Arch Wiki and AUR, getting package info, checking for updates, installing packages securely, and analyzing PKGBUILDs.
Beta — feedback welcome: [email protected]