This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+5 more
Summary
AI summaryUpdates ๐ ้ฎ้ขไฟฎๅค, ๐ง ็ปดๆคไธๅทฅ็จๆน่ฟ๏ผๅฏ้้ ่ฏป๏ผ, and ็ฏๅข็ฎก็ across a mixed release.
Full changelog
CloudBase MCP v2.23.2
๐ ๆฐๅ่ฝ
็ฏๅข็ฎก็
- ๆฐๅข `manageEnv` ๅทฅๅ ท๏ผๆฏๆๆฅ่ฏขๅฅ้คๅ่กจใๅๅปบ็ฏๅขใๅๆดๅฅ้ค๏ผๅ้้ ๏ผๅ็ปญ่ดนๆไฝ๏ผๆๆๆถๅ่ดน็จ็ๆไฝๅ้็จๆท็กฎ่ฎค๏ผ็ฎก็ๆดๅฎๅ จ
ๅผๅๅทฅไฝๆต
- ๆฐๅข IDE ๅพๆ ๅฎๆดๆงๆฃๆฅๅทฅไฝๆต๏ผ่ชๅจ้ช่ฏ IDE ๅพๆ ๅจๆๆกฃ็ปไปถไธญ็้ ็ฝฎไธ่ดๆงๅ URL ๅฏ่พพๆง
๐ ้ฎ้ขไฟฎๅค
- SkillHub ๅๅธๆต็จไผๅ๏ผไฟฎๅค็ๆฌๅทๅฒ็ชๆฃๆตๅ่ชๅจ้ๅข้ป่พ๏ผๆฐๅข beta ๅ็ผๆฏๆ๏ผๅๅธๆด็จณๅฎๅฏ้
- ๆ่ฝๆๆกฃๆน่ฟ๏ผไธบ PostgreSQL ๆจกๅผๆฐๅข P0/P1 ๅฎๅ จๆคๆ ๏ผๆถต็ schema ๆฃๆฅใRLS auth.uid()ใprovider ้ ็ฝฎๆฃๆฅใๅฟๅ็ปๅฝๅ UI ่ฎพ่ฎกๆต็จ
- ๆๆกฃๆดๆฐ๏ผไธบ IDE ๅพๆ ็ปไปถๆฐๅข workbuddy ๅพๆ URL
๐ง ๅ ถไปๆน่ฟ
- ๅๆญฅ CloudBase ๆไปถๆ่ฝๅ Claude ๆ่ฝ้ๅ่ณๆๆฐ็ๆฌ
๐ง ็ปดๆคไธๅทฅ็จๆน่ฟ๏ผๅฏ้้ ่ฏป๏ผ
- ไผๅ SkillHub ๅๅธ่ๆฌ๏ผไฟฎๅคๅค็ๆฌๅนถๅๆถ็็ๆฌๅฒ็ช้ฎ้ข
- ๅๆญฅไธๆธธๆ่ฝ้ ็ฝฎๅ Claude ๆ่ฝ้ๅ
Security Fixes
- Skill document security guardrails added: P0/P1 schema checks, RLS auth.uid() enforcement, provider config validation, anonymous login prevention, and UI design flow hardening for PostgreSQL mode
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About TencentCloudBase/CloudBase-AI-ToolKit
One-stop backend services for WeChat Mini-Programs and full-stack apps. Provides specialized MCP tools for serverless cloud functions, databases, and one-click deployment to production with China market access through WeChat ecosystem.
Related context
Related tools
Beta — feedback welcome: [email protected]