This release includes 2 breaking changes for platform teams planning a safe upgrade.
Published 2d
MCP Developer Tools
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
llm
mcp
mcp-server
vibe-coding
Affected surfaces
breaking_upgrade
deps
Summary
AI summaryRequire Node.js >= 20.18.1 and bump Undici to 7, restoring proxy and custom‑CA support on recent Node versions.
Full changelog
Patch Changes
- beded6c: Bump
undicito 7 and require Node.js >= 20.18.1. On Node 26+ (internal undici 8) the bundled undici 6setGlobalDispatcherwrote a global-dispatcher symbol the built-infetchno longer reads, soHTTPS_PROXYand custom-CA settings were silently ignored and requests failed withENOTFOUNDbehind CONNECT proxies. undici 7 writes both symbols, restoring proxy and CA support. Node 18 is no longer supported (EOL; undici 7 requires Node >= 20.18.1). - 1c081df: Improve query prompts so agents request relevant library documentation instead of passing the task to complete.
Breaking Changes
- Minimum Node.js version increased to >=20.18.1 (Node 18 no longer supported).
- Undici dependency bumped from version 6 to version 7.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- [email protected] Removes `--device` flag and localhost-callback path for `ctx7 login`.
Beta — feedback welcome: [email protected]