This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+6 more
Summary
AI summaryUpdates What's new, Highlights, and unioned across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
`list_files` MCP tool and `list` CLI accept optional `scope` filter for path prefixes. `list_files` MCP tool and `list` CLI accept optional `scope` filter for path prefixes. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
`scope` can be a single absolute path prefix or a list of prefixes (unioned). `scope` can be a single absolute path prefix or a list of prefixes (unioned). Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Matching with `scope` is exact-or-descendant and boundary-safe. Matching with `scope` is exact-or-descendant and boundary-safe. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
`ingest_data` sources are always listed regardless of `scope`. `ingest_data` sources are always listed regardless of `scope`. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Performance | Low |
Using `scope` speeds up listing on large volumes by skipping out-of-scope directories. Using `scope` speeds up listing on large volumes by skipping out-of-scope directories. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Bugfix | Low |
Non-absolute `scope` prefixes now emit a non-fatal warning instead of silent failure. Non-absolute `scope` prefixes now emit a non-fatal warning instead of silent failure. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
Full changelog
Highlights
scopefilter forlist_filesandlist— narrow a listing to one or more absolute path prefixes.
What's new
- The
list_filesMCP tool and thelistCLI subcommand accept an optionalscope: a single absolute path prefix or a list (unioned). - Matching is exact-or-descendant and boundary-safe:
/docs/apimatches/docs/apiand/docs/api/auth.md, but not/docs/apiv2. - On large volumes,
scopealso speeds up the listing by skipping out-of-scope directories during the scan. ingest_datasources are always listed, regardless of scope.- A non-absolute prefix matches nothing and now emits a non-fatal warning (MCP: a warning item; CLI: stderr, exit 0).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About shinpr/mcp-local-rag
Privacy-first document search server running entirely locally. Supports semantic search over PDFs, DOCX, TXT, and Markdown files with LanceDB vector storage and local embeddings - no API keys or cloud services required.
Related context
Beta — feedback welcome: [email protected]