Skip to content

This release includes 3 breaking changes for platform teams planning a safe upgrade.

Published 3mo MCP Data & Storage
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Affected surfaces

breaking_upgrade

Summary

AI summary

Disabled the default 30‑minute idle timeout and removed reconnect logic to comply with MCP specification.

Full changelog

🔧 MCP-Compliant Server Lifecycle

Problem

Server was shutting down after ~30 minutes of inactivity due to a hardcoded idle_timeout=30 (minutes) that never reset on activity. The reconnect loop also incorrectly tried to reopen process-level stdin after EOF.

Root Causes (META analysis, 3 bugs)

  1. idle_timeout timer never resets — fires 30min after start regardless of activity
  2. Reconnect loop impossible for stdio — stdin/stdout are process-level, can't be "reopened"
  3. Not Docker — Docker has no idle timeout; our code was the culprit

MCP Specification Reference

Per MCP Spec 2025-03-26 & 2025-11-25:

stdio shutdown: 1) Close stdin → 2) Wait → SIGTERM → 3) SIGKILL

No idle timeout is defined or recommended by the MCP spec for stdio transport.

Changes

  • idle_timeout default: 300 (disabled, MCP-compliant)
  • ✅ Removed reconnect_timeout CLI arg
  • ✅ Removed reconnect loop entirely (architecturally wrong for stdio)
  • ✅ Simplified tokio::select! to: stdin EOF + SIGINT + SIGTERM + optional idle
  • ✅ Warning log if idle_timeout > 0 (non-standard for MCP stdio)
  • ✅ MCP spec references in code comments

Migration

  • If you previously relied on --idle-timeout 30 (default), the server will now stay alive indefinitely until the client closes stdin or sends a signal
  • If you need idle timeout, explicitly pass --idle-timeout <minutes>
  • --reconnect-timeout CLI arg has been removed (no longer applicable)

Verification

  • cargo fmt ✅ | cargo clippy ✅ (0 warnings) | cargo test ✅ (73/73 pass)

Full Changelog: https://github.com/pomazanbohdan/memory-mcp-1file/compare/v0.2.15...v0.2.16

Breaking Changes

  • Removed `--reconnect-timeout` CLI argument
  • Eliminated reconnect loop for stdio (architecturally incorrect)
  • Changed default `idle_timeout` from 30 minutes to 0 (disabled) per MCP spec

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track pomazanbohdan/memory-mcp-1file

Get notified when new releases ship.

Sign up free

About pomazanbohdan/memory-mcp-1file

A self-contained Memory server with single-binary architecture (embedded DB & models, no dependencies). Provides persistent semantic and graph-based memory for AI agents.

All releases →

Beta — feedback welcome: [email protected]