WiseVision/mcp_server_ros_2

v2606 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 10d MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai mcp mcp-server mcp-server-ros2 ros2 ros2-mcp-server

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 10d

The release bumps the mcp SDK to version 1.23.0 or higher, closing all five Dependabot alerts.

Why it matters: Bumping the mcp SDK to >=1.23.0 eliminates all active security alerts (severity 90), directly reducing vulnerability exposure for deployments using this runtime dependency.

Summary

AI summary

Bump mcp SDK to version 1.23.0 or higher closing all 5 Dependabot alerts.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Bump mcp SDK to >=1.23.0, closing all 5 Dependabot alerts Bump mcp SDK to >=1.23.0, closing all 5 Dependabot alerts Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Add instruction for installing via codex CLI Add instruction for installing via codex CLI Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Use PAT_TOKEN for main->dev sync in CI workflow, fixing silent failures Use PAT_TOKEN for main->dev sync in CI workflow, fixing silent failures Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fix Jazzy FastRTPS type support mismatch Fix Jazzy FastRTPS type support mismatch Source: llm_adapter@2026-07-16 Confidence: high	—
Refactor	Low	Move CI workflows to GitHub‑hosted ubuntu-latest, removing self‑hosted runner Move CI workflows to GitHub‑hosted ubuntu-latest, removing self‑hosted runner Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

What's Changed

Update server name and repository URL in Dockerfile and server.json by @czarekk215 in https://github.com/wise-vision/ros2_mcp/pull/37
Enhance CI workflow by @czarekk215 in https://github.com/wise-vision/ros2_mcp/pull/40
ci: move workflows to GitHub-hosted ubuntu-latest (self-hosted runner removed) by @adamkrawczyk in https://github.com/wise-vision/ros2_mcp/pull/50
fix(ci): use PAT_TOKEN for main->dev sync (workflow-file syncs were silently failing) by @adamkrawczyk in https://github.com/wise-vision/ros2_mcp/pull/53
fix(security): bump mcp SDK to >=1.23.0 (closes all 5 Dependabot alerts) by @adamkrawczyk in https://github.com/wise-vision/ros2_mcp/pull/52
Fix Jazzy FastRTPS type support mismatch by @adamkrawczyk in https://github.com/wise-vision/ros2_mcp/pull/49
Add instruction how to install in codex cli by @adamkrawczyk in https://github.com/wise-vision/ros2_mcp/pull/43
chore: repo hygiene — fix stale repo references, add CODE_OF_CONDUCT (closes #42), add pre-commit (closes #7) by @adamkrawczyk in https://github.com/wise-vision/ros2_mcp/pull/51
Release 2606 by @adamkrawczyk in https://github.com/wise-vision/ros2_mcp/pull/48
ci: add tag-triggered release workflow by @adamkrawczyk in https://github.com/wise-vision/ros2_mcp/pull/56

Full Changelog: https://github.com/wise-vision/ros2_mcp/compare/2511...2606

Security Fixes

dep: Bump mcp SDK to >=1.23.0 — closes all 5 Dependabot alerts (CVE details not provided)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track WiseVision/mcp_server_ros_2

Get notified when new releases ship.

About WiseVision/mcp_server_ros_2

MCP server for ROS2 enabling AI-driven robotics applications and services.

All releases →