Skip to content

vinkius-labs/mcp-fusion

v3.14.8 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 2mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

mcp mcp-framework mcp-server model-context-protocol

Affected surfaces

breaking_upgrade

Summary

AI summary

Fixed silent empty JSON schemas when using Zod 4 with @vurb/core.

Full changelog

Fixed

@vurb/core — Zod 4 JSON Schema Compatibility

  • zodToJsonSchema silently returns empty schemas on Zod 4 — The zod-to-json-schema library (v3.x) is incompatible with Zod 4: it returns { \"\": \"...\" } with no properties or required fields, causing all MCP tool parameters to disappear from the inputSchema exposed to clients. This affected any MCP server installed with Zod 4, making tools appear to accept no arguments even when parameters were correctly declared via .withString().

  • New ZodCompat.ts compatibility layer — Introduced zodToJson() and zodToJsonWithOptions() wrapper functions that detect the Zod version at runtime:

    • Zod 4: Uses the native z.toJSONSchema() built-in conversion method
    • Zod 3: Delegates to zod-to-json-schema (backward compatible)
  • Three call-sites migrated: SchemaGenerator.ts, ExpositionCompiler.ts, JsonSerializer.ts

Test Suite

  • ZodCompat.test.ts — 13 regression tests covering all schema conversion scenarios

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track vinkius-labs/mcp-fusion

Get notified when new releases ship.

Sign up free

About vinkius-labs/mcp-fusion

A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.

All releases →

Related context

Earlier breaking changes

  • v4.0.0 All packages now published under the `@mcpfusion` npm scope.
  • v4.0.0 GitHub repository renamed to vinkius-labs/mcpfusion; npm packages under @mcpfusion scope.
  • v4.0.0 All source code, documentation, CLI output, workflows, and npm packages now use the @mcpfusion scope.

Beta — feedback welcome: [email protected]