This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Moderate signalThe MCP implementation has been refactored to a stateful design leveraging Redis for session management.
Why it matters: This refactor enables persistent user sessions across requests, improving reliability for applications using the MCP module.
Summary
AI summaryMCP implementation converted to stateful using Redis for session management.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Performance | Medium |
Reduce Redis writes on `refresh` by checking remaining TTL and issuing `EXPIRE` only when within one day of expiry. Reduce Redis writes on `refresh` by checking remaining TTL and issuing `EXPIRE` only when within one day of expiry. Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Refactor | Medium |
Convert the stateless MCP implementation to a stateful one using Redis for session management. Convert the stateless MCP implementation to a stateful one using Redis for session management. Source: llm_adapter@2026-05-22 Confidence: high |
— |
Full changelog
Major Changes
- af6a7b5: Convert the stateless MCP implementation to a stateful one using Redis for session management.
Patch Changes
- 3d73145: Reduce Redis writes on
refreshby checking the remaining TTL first and only issuingEXPIREwhen the session is within one day of expiry.
Breaking Changes
- MCP changed from stateless to stateful, now requiring a Redis backend for session storage.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]