Skip to content

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 6d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai aicoding cloudbase database mcp miniprogram
+5 more
postgresql supabase tencent vibe-coding web

Affected surfaces

breaking_upgrade auth

Summary

AI summary

Updates PostgreSQL 迁移契约, 🐛 问题修复, and 插件与 IDE 接入 across a mixed release.

Full changelog

CloudBase MCP v2.24.0

🎉 新功能

PostgreSQL 迁移契约

  • 建表 / 改 schema 默认走 applyMigration,需显式提供 14 位 migrationVersion,避免云端与本地 migration 历史分叉
  • planMigration 跳转到 applyMigration 时会带回同一 version;成功响应包含 localFileHint(建议本地路径 migrations/<version>_<name>.sql
  • execute 对 schema DDL 默认拦截,并引导改用 migration(逃生口:allowDdlViaExecute=true

插件与 IDE 接入

  • 支持 Open Plugin Specification v1.0.0
  • 提供独立的插件仓库,可用 npx plugins add 安装

🐛 问题修复

  • 修复插件仓库同步时的 dotfiles / 生成物遗漏
  • 加固 skill-manifest 校验,避免不安全重建
  • 统一文档中的 npx plugins add 与 marketplace 安装路径说明

⚠️ 破坏性变更(Agent / 自动化需注意)

  • planMigration / applyMigration 不再自动生成 migrationVersion,缺失会返回 MIGRATION_VERSION_REQUIRED
  • executeCREATE/ALTER/DROP 等 DDL 默认失败,请改走 applyMigration

🔧 维护与工程改进(可选阅读)

  • 补充 skill 评测与 skill 瘦身相关规格文档

Breaking Changes

  • planMigration / applyMigration no longer auto‑generate migrationVersion; missing version returns MIGRATION_VERSION_REQUIRED
  • execute of CREATE/ALTER/DROP DDL defaults to failure; must use applyMigration or set allowDdlViaExecute=true

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track TencentCloudBase/CloudBase-AI-ToolKit

Get notified when new releases ship.

Sign up free

About TencentCloudBase/CloudBase-AI-ToolKit

One-stop backend services for WeChat Mini-Programs and full-stack apps. Provides specialized MCP tools for serverless cloud functions, databases, and one-click deployment to production with China market access through WeChat ecosystem.

All releases →

Related context

Earlier breaking changes

  • v2.20.0 Removes Tag parameter from deleteCollection, retaining only EnvId
  • v2.20.0 Blocks start_auth and logout operations when using API Key authentication mode

Beta — feedback welcome: [email protected]