This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Summary
AI summaryJoining a Toolport Team no longer freezes the app or exhausts memory.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Destructive‑command screening now catches PowerShell `-EncodedCommand` and `PERL5OPT` environment variables. Destructive‑command screening now catches PowerShell `-EncodedCommand` and `PERL5OPT` environment variables. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Bulk imports of servers must be reviewed before applying, preserving scoped package names and avoiding collisions. Bulk imports of servers must be reviewed before applying, preserving scoped package names and avoiding collisions. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
A `${ROOT}` server runs in the client's actual project root, resolved live from its MCP roots. A `${ROOT}` server runs in the client's actual project root, resolved live from its MCP roots. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Joining a Toolport Team no longer freezes the app. Joining a Toolport Team no longer freezes the app. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Background sync now runs off the UI thread, preventing interface hangs during team connection. Background sync now runs off the UI thread, preventing interface hangs during team connection. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Background sync saves are a no‑op when nothing changed, eliminating memory exhaustion from process leaks. Background sync saves are a no‑op when nothing changed, eliminating memory exhaustion from process leaks. Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
Toolport v1.7.2
Joining a Toolport Team no longer freezes the app.
Two separate bugs locked things up when you connected the desktop app to a team. Both are
fixed.
The app no longer hangs on join. The team network calls (join, background config sync, admin
push) ran on the app's UI thread, and the sync holds a roughly 30-second long-poll open, so
simply being connected to a team blocked the interface and the window went "Not Responding."
They now run off the main thread.
Joining no longer exhausts memory. The background sync rewrote the local registry on a timer,
and every gateway re-spawned each server on the change, leaking processes until RAM ran out.
Saves are now a no-op when nothing changed, and the gateway only rebuilds when the server set
actually changes.
Alongside the Teams work:
- Review bulk imports before applying. Detect or paste a batch of servers and confirm the
full set before it lands, with scoped package names preserved and no stale-row or same-name
collisions. - Tighter spawn screening. Destructive-command screening now catches PowerShell
-EncodedCommandandPERL5OPT. - Project-root working directory. A
${ROOT}server runs in the client's actual project
root, resolved live from its MCP roots.
Upgrade
- In-app: click Toolport v1.x.x in the sidebar footer (shows Update to v… when a
release is available). - Installer: Releases.
Contributors
First-time community contributors, thank you:
- @glasses-and-hat, unit tests for the token-savings formatter (#277)
- @SK-Sathyavada-008, a consolidated CONDUIT environment variable reference (#278)
Changelog: 1.7.2.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Toolport
All releases →Beta — feedback welcome: [email protected]