This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+4 more
Affected surfaces
ReleasePort's take
Light signalBreaking: v1.31.0 requires rationale parameter on seven destructive MCP tools. Calls without rationale will fail immediately.
Why it matters: Wiki delete/modify operations require new rationale context. Update all automation and integration code; test in dev before production upgrade.
Summary
AI summaryRationale is now a required parameter on seven destructive MCP tools.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
golang.org/x/text bumped for security fix golang.org/x/text bumped for security fix Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Breaking | Medium |
rationale parameter now required on 7 destructive MCP tools rationale parameter now required on 7 destructive MCP tools Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
wiki stale-pages CLI command lists pages not edited in N days wiki stale-pages CLI command lists pages not edited in N days Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
wiki similar CLI command finds pages with overlapping content wiki similar CLI command finds pages with overlapping content Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
wiki CLI returns typed exit codes for error categorization wiki CLI returns typed exit codes for error categorization Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Claude Code plugin scaffold with wiki-publish skill added Claude Code plugin scaffold with wiki-publish skill added Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
`wiki` CLI returns typed exit codes for usage, not found, API errors, auth, rate limit, and config errors. `wiki` CLI returns typed exit codes for usage, not found, API errors, auth, rate limit, and config errors. Source: granite4.1:30b@2026-05-22-audit Confidence: low |
— |
| Dependency | Medium |
github.com/modelcontextprotocol/go-sdk bumped to 1.6.0 github.com/modelcontextprotocol/go-sdk bumped to 1.6.0 Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
github.com/olgasafonova/mcp-servercard-go bumped to v0.3.0 github.com/olgasafonova/mcp-servercard-go bumped to v0.3.0 Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
tools/handlers.go refactored to name→closure map pattern tools/handlers.go refactored to name→closure map pattern Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
wiki/ package reorganized into modular files wiki/ package reorganized into modular files Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
Added
wiki stale-pagesCLI command. Lists pages not edited in N days (default 90) with--days,--category,--namespace,--limitfilters. Wraps the existingmediawiki_get_stale_pagesMCP tool so the CLI surface matches MCP coverage.wiki similar <page>CLI command. Finds pages whose content overlaps with a source page; includes a similarity score, common terms, and existing-link indicators. Flags:--limit,--category,--min-score. Wraps the existingmediawiki_find_similar_pagesMCP tool.wikiCLI now returns typed exit codes so shell scripts can branch on failure category:2usage error,3not found (HTTP 404),5wiki API error (other 4xx/5xx),6auth error (HTTP 401/403),7rate limit (HTTP 429),10config error. Adapted from the cli-printing-press canonical map;4remains reserved forwiki lintfindings (existing public API), so auth errors use6instead of4. Plain errors still exit1.wiki.APIErrorfrom the wiki client is auto-classified by status; commands can also returnusageErr/notFoundErr/authErr/apiErr/rateLimitErr/configErrdirectly. Cobra flag-parse errors (unknown flag, missing required arg) auto-wrap to exit2.- Claude Code plugin scaffold. New
.claude-plugin/directory withmarketplace.json,plugin.json, and a first skillwiki-publishthat shells out to thewiki publishCLI. Install via/plugin marketplace add olgasafonova/mediawiki-mcp-server. Design rationale and the full surface map are inMULTI-SURFACE-DISTRIBUTION.md: the Go module is the shared knowledge layer; MCP server,wikiCLI, and this plugin are surfaces over it.
Changed
- Breaking (write tools only):
rationaleis now a required parameter on 7 destructive MCP tools —mediawiki_edit_page,mediawiki_find_replace,mediawiki_apply_formatting,mediawiki_bulk_replace,mediawiki_upload_file,mediawiki_move_page,mediawiki_manage_categories. The agent must supply a one-sentence "why" with each write call; the value is logged to the tool audit trail and themcp.tool.rationaleOTel span attribute. Rationale is optional (recorded when supplied, ignored when omitted) on the 35 read-only tools. Pattern source: Teddy Riker, "Designing for Agents" (Ramp). Read-only integrations require no changes; write integrations must add therationalefield. tools/handlers.godispatcher refactored from a 41-case method switch + 41-case type switch to a name→closure map; the non-generic dispatcher method is gone, closures call the genericregister[Args, Result]helper directly via type inference.logExecutionsplit intoappendArgAttrs+appendResultAttrs. Code Health 7.64 → 9.53 (Yellow → Green). No public API change.wiki/package reorganized: monolithic read path consolidated intowiki/read.go; helpers extracted acrosslinks.go,quality.go,search.go,write.goto lift per-file Code Health scores. No public API change.
Dependencies
- Bumped
golang.org/x/text(security fix) - Bumped
github.com/modelcontextprotocol/go-sdk - Bumped
github.com/olgasafonova/mcp-servercard-goto v0.3.0
What's Changed
- deps: bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0 in the go-dependencies group by @dependabot[bot] in https://github.com/olgasafonova/mediawiki-mcp-server/pull/49
- deps: bump golang.org/x/text from 0.36.0 to 0.37.0 in the go-dependencies group by @dependabot[bot] in https://github.com/olgasafonova/mediawiki-mcp-server/pull/51
Full Changelog: https://github.com/olgasafonova/mediawiki-mcp-server/compare/v1.30.0...v1.31.0
Breaking Changes
- Rationale becomes a required parameter on the following write-only MCP tools: mediawiki_edit_page, mediawiki_find_replace, mediawiki_apply_formatting, mediawiki_bulk_replace, mediawiki_upload_file, mediawiki_move_page, mediawiki_manage_categories.
Security Fixes
- dep: golang.org/x/text bumped from 0.36.0 to 0.37.0 (includes security fix)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About olgasafonova/mediawiki-mcp-server
Connect to any MediaWiki wiki (Wikipedia, Fandom, corporate wikis). 33+ tools for search, read, edit, link analysis, revision history, and Markdown conversion. Supports stdio and HTTP transport.
Related context
Beta — feedback welcome: [email protected]