This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+14 more
ReleasePort's take
Light signalv1.36.1 mandates explicit ?project= query parameter when multiple projects are registered in the daemon.
Why it matters: Update all daemon clients to include ?project= before upgrading; failing requests will be rejected after upgrade.
Summary
AI summaryDaemon now requires explicit ?project= when multiple projects are registered.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Performance | Low |
XML performance guard threshold widened from 500 ms to 1500 ms. XML performance guard threshold widened from 500 ms to 1500 ms. Source: granite4.1:30b@2026-05-22-audit Confidence: low |
— |
| Bugfix | Medium |
Daemon auto-recover from FK-violating stale data on initial index. Daemon auto-recover from FK-violating stale data on initial index. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Require explicit ?project= when multiple projects registered. Require explicit ?project= when multiple projects registered. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Density-based binary detection in isBinaryBuffer. Density-based binary detection in isBinaryBuffer. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
search_with_mode passes both text and query fields. search_with_mode passes both text and query fields. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Medium |
Widen XML perf guard threshold from 500ms to 1500ms. Widen XML perf guard threshold from 500ms to 1500ms. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Medium |
Release 1.36.0 consistency fixes in documentation. Release 1.36.0 consistency fixes in documentation. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Medium |
Align check_claudemd_drift return shape with auditConfig. Align check_claudemd_drift return shape with auditConfig. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Medium |
Pin ranking_pins/pass_cache in fresh-DB schema guard. Pin ranking_pins/pass_cache in fresh-DB schema guard. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Medium |
Smoke-test eval CLI list/run/baseline integration. Smoke-test eval CLI list/run/baseline integration. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Medium |
MCP-tools end-to-end smoke script for new session tools. MCP-tools end-to-end smoke script for new session tools. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Medium |
Bump cli-smoke DB-schema test timeout to 30 seconds for Windows runners. Bump cli-smoke DB-schema test timeout to 30 seconds for Windows runners. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Other | Medium |
Skip eval-run smoke cases when project is not indexed. Skip eval-run smoke cases when project is not indexed. Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
1.36.1 (2026-05-14)
Bug Fixes
- daemon: auto-recover from FK-violating stale data on initial index (ea8b7a6)
- daemon: require explicit ?project= when multiple projects registered (58e25a2)
- indexer: density-based binary detection in isBinaryBuffer (df7b3d8)
- retrieval: search_with_mode passes both
textandqueryfields (6abaea5) - test: bump cli-smoke DB-schema test timeout to 30s for Windows runners (539ae09)
- test: skip eval-run smoke cases when project is not indexed (039aced)
- test: widen XML perf guard threshold from 500ms to 1500ms (ddb5d84)
Documentation
- release 1.36.0 consistency fixes (a604678)
- tools: align check_claudemd_drift return shape with auditConfig (af2f7e4)
Tests
- db: pin ranking_pins/pass_cache in fresh-DB schema guard (10b8e82)
- integration: smoke-test eval CLI list/run/baseline (ab5bebf)
- smoke: MCP-tools end-to-end smoke script for new session tools (3a362d8)
Upgrade
npm install -g trace-mcp@latest
trace-mcp init
Breaking Changes
- Daemon requires explicit ?project= query parameter when multiple projects are registered.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About nikolai-vysotskyi/trace-mcp
Framework-aware code intelligence that indexes source code into a cross-language dependency graph. Understands framework semantics — routes, ORM relations, component rendering, DI trees — for navigation, impact analysis, call graphs, refactoring, security scanning, and cross-session memory.
Related context
Related tools
Earlier breaking changes
- v1.41.1 Removes desktop app from core repository (phase E).
Beta — feedback welcome: [email protected]