Skip to content

This release fixes issues for SREs watching stability and regressions.

Published 6d MCP Search & Web
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Summary

AI summary

Fixed four P1 issues: web_extract projection now returns spans, SDK import reliability restored, extraction provider cache identity deterministic, and non‑production gate skips modules with production=False.

Full changelog

Patch release fixing the four P1 findings from the post-1.1.0 sync review.

Fixed

  • The MCP web_extract projection now preserves spans and span_contract_version on result items; previously the engine computed spans but clients never received them.
  • wsp_sdk imports as a plain package again (its ProviderRequestError import no longer depends on test-only sys.path layout).
  • Extraction requests served by discovered Provider-SDK extraction providers no longer fail closed inside the cache identity; SDK providers contribute a deterministic identity derived from their spec and the non-secret scalar settings of their config section. Unknown providers still fail closed.
  • The providers.d non-production gate acts before module execution: modules declaring a literal production=False are skipped without being imported unless WSP_SDK_ALLOW_NON_PRODUCTION is set.

No behavioural changes for built-in providers or any search path. Mirrors hermes-web-search-plus v3.1.2.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track robbyczgw-cla/web-search-plus-mcp

Get notified when new releases ship.

Sign up free

About robbyczgw-cla/web-search-plus-mcp

Multi-provider web search with intelligent auto-routing (Serper, Tavily, Exa)

All releases →

Related context

Earlier breaking changes

  • v1.0.0 Native Perplexity and Kilo Perplexity answer endpoints removed from public provider schemas.
  • v1.0.0 Public search surface reduced to 12 verified source-result providers; extraction limited to 8 providers.
  • v0.5.1 kilo_perplexity renamed to kilo-perplexity without aliasing
  • v0.5.1 Perplexity provider separated from kilo-perplexity with distinct API keys

Beta — feedback welcome: [email protected]