vinkius-labs/mcp-fusion releases

No immediate action

v4.2.0 New feature · 8d

seoMetadata block

Open

No immediate action

v4.1.0 New feature · 8d

Progressive disclosure

Open

Review required

v4.0.4 Bug fix · 8d

RCE / SSRF Dependencies

process.env handling fix

Open

Upgrade now

v4.0.3 Bug fix · 8d

Breaking upgrade

`process.env` literal corruption fix

Open

Review required

v4.0.1 Bug fix · 14d

Breaking upgrade Auth

PostProcessor async fixes

Open

No immediate action

v4.0.0 Breaking risk · 15d

Rebrand, repo rename, deploy command

Open

No immediate action

v3.19.6 Breaking risk · 23d

Performance fixes + leak detector

Open

No immediate action

v3.19.5 Maintenance · 28d

@vurb/core README update

Open

No immediate action

v3.19.4 Bug fix · 28d

Resources/introspection fix + addDictionary schema

Open

No immediate action

v3.19.3 Breaking risk · 1mo

Fix bundled native-addon crash

Open

Upgrade now

v3.19.2 Bug fix · 1mo

RCE / SSRF

Introspection bundle fix

Open

Upgrade now

v3.19.1 Bug fix · 1mo

Auth Breaking upgrade

SSE parser fix + streaming checks

Open

No immediate action

v3.19.0 New feature · 1mo

@vurb/a2a A2A bridge

Open

No immediate action

v3.18.0 New feature · 1mo

Auto‑discovery server card endpoint

Open

Upgrade now

v3.17.3 Bug fix · 1mo

Breaking upgrade

AsyncLocalStorage stub fix

Open

No immediate action

v3.17.2 Bug fix · 1mo

interpolateParams + response transform fixes

Open

No immediate action

v3.17.1 Bug fix · 1mo

Fixed crypto ReferenceError

Open

No immediate action

v3.17.0 · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.16.0 New feature · 1mo

Human‑in‑the‑loop DSL

Open

Review required

v3.15.3 Breaking risk · 1mo

Dependencies Breaking upgrade

@vurb/core dependency promotion

Open

No immediate action

v3.15.2 New feature · 1mo

--no-marketplace flag

Open

No immediate action

v3.15.1 Bug fix · 1mo

ToolResponse detection fixes

Open

No immediate action

v3.15.0 New feature · 1mo

JSON parameter methods

Open

Review required

v3.14.8 Bug fix · 2mo

Breaking upgrade

Fix Zod 4 JSON schema issue

Open

Review required

v3.14.5 Bug fix · 2mo

Breaking upgrade

JSON string return for edge dispatch

Open

No immediate action

v3.14.4 Bugfix · 2mo

V8 isolate boot failure fix

Open

Config change

v3.14.0 New feature · 2mo

Auth

OAuth 2.0 BYOA

Open

Review required

v3.13.1 Bug fix · 2mo

Auth

Credential schema persistence fixed

Open

No immediate action

v3.13.0 New feature · 2mo

AI interaction previews

Open

Review required

v3.12.8 New feature · 2mo

Auth RBAC

read-only flag in deploy payload

Open

No immediate action

v3.12.7 Bug fix · 2mo

Changelog missing handling

Open

No immediate action

v3.12.6 New feature · 2mo

Resilient esbuild resolution

Open

No immediate action

v3.12.5 Bug fix · 2mo

esbuild install fix

Open

No immediate action

v3.12.4 Bug fix · 2mo

esbuild install runs from project root

Open

No immediate action

v3.12.3 Bug fix · 2mo

Auto‑install esbuild on failure

Open

No immediate action

v3.12.2 Bug fix · 2mo

vurb update fix

Open

Review required

v3.12.1 Bug fix · 2mo

Auth

Fix false‑positive bundle scans

Open

No immediate action

v3.12.0 New feature · 2mo

New CLI commands

Open

No immediate action

v3.11.1 New feature · 2mo

Bundle size increase + deduplication

Open

No immediate action

v3.11.0 New feature · 2mo

SaaS Integration Identity + deploy warnings

Open

No immediate action

v3.10.0 New feature · 2mo

Behavioral Trust Score + Security Passport

Open

Review required

v3.9.0 New feature · 2mo

Auth Breaking upgrade

BYOC Credentials System

Open

No immediate action

v3.8.3 Bug fix · 2mo

Introspection expansion + banner styling

Open

No immediate action

v3.8.2 Bug fix · 2mo

Introspection action expansion fix

Open

No immediate action

v3.8.1 Breaking risk · 2mo

Resources list handler fix

Open

Review required

v3.8.0 New feature · 2mo

Auth RBAC

Federated Handoff Protocol

Open

No immediate action

v3.7.13 Breaking risk · 2mo

StateMachine transition race fix

Open

No immediate action

v3.7.12 Bug fix · 2mo

Fix router action dedup

Open

No immediate action

v3.7.11 Maintenance · 2mo

Routine maintenance and dependency updates.

Open

Review required

v3.7.10 Breaking risk · 2mo

Auth RBAC

Missing path‑param guard

Open

No immediate action

v3.7.9 Bug fix · 2mo

Remote URL preservation + token serverId resolution

Open

Review required

v3.7.8 Security relevant · 2mo

Auth Breaking upgrade

Security hardening

Open

No immediate action

v3.7.7 Bugfix · 2mo

TS2352 build error fixed

Open

No immediate action

v3.7.6 Bug fix · 2mo

Action expansion + deploy styling

Open

No immediate action

v3.7.5 Bug fix · 2mo

Introspection build fix

Open

No immediate action

v3.7.4 Bug fix · 2mo

IIFE introspection fix

Open

No immediate action

v3.7.3 Bug fix · 2mo

Test assertion fix

Open

No immediate action

v3.7.2 Bug fix · 2mo

Registry merge + introspection speed

Open

No immediate action

v3.7.1 Bug fix · 2mo

ToolRegistry merge + Introspect timeout

Open

No immediate action

v3.7.0 Breaking risk · 2mo

Regex introspection removal

Open

No immediate action

v3.6.10 Maintenance · 2mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.6.9 Bugfix · 2mo

vurb deploy esbuild fix

Open

No immediate action

v3.6.8 Mixed · 2mo

CLI token command + fix module resolution

Open

No immediate action

v3.6.7 Bug fix · 2mo

Fix vurb module resolution

Open

No immediate action

v3.6.6 Breaking risk · 2mo

Breaking changes — review before upgrading.

Open

Review required

v3.6.5 Bug fix · 2mo

Auth Breaking upgrade

RateLimiter + session TTL leak fixes

Open

Review required

v3.6.4 Bug fix · 2mo

Auth Breaking upgrade

PII leak fix

Open

Review required

v3.6.3 Bug fix · 2mo

Auth RCE / SSRF

FSM leak + generator zombies + RedactEngine race

Open

Review required

v3.6.2 Security relevant · 2mo

Auth RCE / SSRF

Prompt injection fix + body‑size limit

Open

No immediate action

v3.6.0 New feature · 2mo

Model APIs + E‑commerce example

Open

No immediate action

v3.5.0 New feature · 2mo

Bulk parameter declaration

Open

Review required

v3.3.4 Breaking risk · 2mo

Auth RBAC

Vurb.ts rebrand + Security Layer

Open

No immediate action

v3.3.3 New feature · 2mo

TelemetryCollector + Mutation Presenter docs

Open

No immediate action

v3.3.2 Breaking risk · 2mo

UiBlockMeta, extendPresenter, makeAsync, PresenterConfig async

Open

No immediate action

v3.3.1 New feature · 2mo

Collection suggestions, rules, embed iteration

Open

No immediate action

v3.3.0 New feature · 2mo

HTTP transport + SSE

Open

No immediate action

v3.2.3 Bugfix · 2mo

LLM client compatibility fix

Open

No immediate action

v3.2.2 Bug fix · 2mo

Fix duplicate tool registration

Open

v3.2.1 Breaking risk · 2mo

Breaking changes

• Package name changed from urb to @vurb/core
• All TypeScript imports must now use '@vurb/core' instead of 'vurb'
• Satellite peerDependencies updated to require '@vurb/core'

Full changelog

Changes

• Package rename: Core package renamed from \urb\ to @vurb/core\
• TypeScript imports: All imports updated from 'vurb'\ to '@vurb/core'\
• Dependencies: All satellite peerDependencies updated to @vurb/core\
• Docs: npm badges fixed, CLI commands use binary name \urb\
• Badges: Added npm version badges to all satellite docs

View release on GitHub

No immediate action

v3.2.0 Breaking · 2mo

Repository rename

Open

Review required

v3.1.31 Breaking risk · 3mo

RCE / SSRF

Sandbox rejects eval/new Function

Open

No immediate action

v3.1.30 Bug fix · 3mo

ExternalCopy error code fix

Open

No immediate action

v3.1.29 Bug fix · 3mo

SandboxEngine OOM fix

Open

No immediate action

v3.1.28 Bug fix · 3mo

Console warn fix

Open

No immediate action

v3.1.27 Bug fix · 3mo

Empty action name guard

Open

No immediate action

v3.1.26 Bug fix · 3mo

PromptRegistry role fix

Open

Security behavior changed

v3.1.25 Bug fix · 3mo

Auth RBAC

FSM gate enforcement + bounded snapshots

Open

Review required

v3.1.24 Bug fix · 3mo

Auth

Cursor pagination fix

Open

No immediate action

v3.1.23 Bug fix · 3mo

.env parser + version read

Open

Review required

v3.1.22 Bug fix · 3mo

Auth RBAC

CLI arg validation

Open

No immediate action

v3.1.21 Bug fix · 3mo

Bug fixes and stability improvements.

Open

Review required

v3.1.20 Bug fix · 3mo

RCE / SSRF

Unhandled rejection crash fix

Open

Review required

v3.1.19 Bug fix · 3mo

Auth RCE / SSRF

Windows CLI fix + prototype pollution

Open

Review required

v3.1.18 Bug fix · 3mo

Auth

Token permission fix + validation bugs

Open

Review required

v3.1.17 Bug fix · 3mo

Auth RCE / SSRF

Prototype pollution + hidden tools

Open

No immediate action

v3.1.16 Breaking risk · 3mo

Prompt cursor + ZodNumber fix

Open

No immediate action

v3.1.15 Breaking risk · 3mo

Cycle detection + async guard

Open

No immediate action

v3.1.14 Breaking risk · 3mo

Telemetry cleanup fix

Open

No immediate action

v3.1.13 Bug fix · 3mo

ToolResponse fix + builder transfer

Open

No immediate action

v3.1.12 Bug fix · 3mo

Zod transform handling + redactPII fix

Open

No immediate action

v3.1.11 Breaking risk · 3mo

Boolean coercion fix

Open

Review required

v3.1.10 Bug fix · 3mo

Auth RBAC

.strict() fix

Open

Review required

v3.1.9 Bug fix · 3mo

Auth RBAC

CursorCodec ensureSecret race fix

Open

No immediate action

v3.1.8 Bug fix · 3mo

Observability + async rejection

Open

Review required

v3.1.7 Bug fix · 3mo

Auth Crypto / TLS

Group reparent fix + timingSafeCompare

Open

Review required

v3.1.6 Bug fix · 3mo

Auth

FSM race condition fix

Open