Yaniv Golan Release Notes
Last updated: Apr 6, 2026
Yaniv Golan Products
All Yaniv Golan Release Notes (25)
- Apr 5, 2026
- Date parsed from source:Apr 5, 2026
- First seen by Releasebot:Apr 6, 2026
MCP Bash Framework by Yaniv Golan
[1.2.2] - 2026-04-05
MCP Bash Framework fixes macOS bundle path resolution and improves installer checks so users are warned when an older mcp-bash in PATH could shadow a fresh install.
Fixed
Bundle icon/screenshot path resolution now works on macOS: The v1.2.1 fix for resolving
server.d/-relative paths usedrealpath -m(GNU coreutils), which macOS's BSDrealpathdoesn't support. Replaced with a portable shell-based resolution usingcd+pwd. Also normalizes the destination path in the bundle to avoid../escaping the bundle directory.Installer warns when another mcp-bash shadows the new install: After installation, the installer checks if a different
mcp-bashbinary earlier inPATHwould take precedence over the one just installed (e.g., a stale manual install shadowing a Homebrew install). Prints version and path of the shadowing binary.
- Apr 4, 2026
- Date parsed from source:Apr 4, 2026
- First seen by Releasebot:Apr 5, 2026
MCP Bash Framework by Yaniv Golan
[1.2.1] - 2026-04-04
MCP Bash Framework fixes installer and bundling behavior with better vendored runtime support, clearer CLI errors, updated vendor docs, and more flexible icon and screenshot path resolution from both project root and server.d/.
Fixed
Installer no longer blocks when MCPBASH_HOME points to a different path: Previously, the installer refused to run whenever MCPBASH_HOME was set, even if it pointed to a vendored runtime (.mcp-bash/) rather than the install target. The check now only blocks when MCPBASH_HOME matches the install directory, allowing CI workflows to install the full CLI alongside a vendored runtime.
Vendored runtime gives a clear error for CLI commands: Running CLI commands (e.g., validate, bundle, doctor) against a vendored or embedded runtime previously failed with a cryptic "No such file or directory". The entrypoint now detects missing CLI modules and prints a helpful message explaining that a full mcp-bash install is required.
Vendor docs now clarify CLI commands are not included: docs/VENDORING.md explicitly lists which commands require a full install and notes that the installer won't conflict with a vendored copy.
Bundle resolves icons and screenshots paths from both project root and server.d/: Paths in the server.meta.json icons and screenshots arrays can now be relative to either the project root (assets/icons/foo.png) or to server.d/ (../assets/icons/foo.png). Previously, only project-root-relative paths worked, so ../ paths from server.d/ would fail with a spurious warning.
All of your release notes in one feed
Join Releasebot and get updates from Yaniv Golan and hundreds of other software products.
- Apr 3, 2026
- Date parsed from source:Apr 3, 2026
- First seen by Releasebot:Apr 3, 2026
- Modified by Releasebot:Apr 5, 2026
MCP Bash Framework by Yaniv Golan
[1.2.0] - 2026-04-03
MCP Bash Framework adds vendoring support, a new mcp-bash vendor command, and a Homebrew install path for easier deployment. It also introduces a Renovate preset for vendored copies and fixes bundled builds so built-in resource providers work reliably in embedded framework trees.
Added
- mcp-bash vendor command: Embeds the mcp-bash runtime into a project's .mcp-bash/ directory for committing to git, eliminating the need for a system-wide install at runtime. Useful for dev teams, CI pipelines, and MCP clients that do not support MCPB bundles. Includes --verify for SHA-256 integrity checking, --upgrade to update in place, and --dry-run to preview. Writes a vendor.json lockfile recording version, digest, source, and timestamp. See docs/VENDORING.md.
- Homebrew tap: mcp-bash is now installable via brew install yaniv-golan/mcp-bash/mcp-bash. Homebrew handles upgrades (brew upgrade mcp-bash) and is the recommended install method on macOS and Linux. The formula is auto-bumped on each release.
- Renovate preset for vendored copies: A renovate-preset.json in this repo configures Renovate to track vendor.json against GitHub Releases and open automatic upgrade PRs. Users opt in with {"extends": ["github>yaniv-golan/mcp-bash-framework//renovate-preset"]} in their renovate.json.
Fixed
- Built-in resource providers now embedded in bundles and vendor trees: Both lib/resources.sh and sdk/tool-sdk.sh resolve built-in providers (file://, https://, git://, echo://, ui://) via ${MCPBASH_HOME}/providers/. Previously, mcp-bash bundle did not copy the framework's providers/ directory into .mcp-bash/, so any server using built-in resource providers would silently fail in bundled deployments unless the project overrode every provider. The providers/*.sh files are now always included in the embedded framework tree.
- Apr 3, 2026
- Date parsed from source:Apr 3, 2026
- First seen by Releasebot:Apr 3, 2026
- Modified by Releasebot:Apr 5, 2026
MCP Bash Framework by Yaniv Golan
[1.1.5] - 2026-04-03
MCP Bash Framework adds richer MCPB manifest support with static discovery for tools and prompts, passthrough for icons, screenshots, platform overrides, _meta, and localization, plus a fix for a cache race that could skip disk scans at epoch boundaries.
Added
Static tools array in MCPB manifest: The bundler now scans tools/*/tool.meta.json at bundle time and emits a tools array of {name, description} objects in manifest.json. This enables pre-install discovery in extension stores — clients can show what an extension offers before downloading. Emitted alongside the existing tools_generated flag.
Static prompts array in MCPB manifest: Same pattern for prompts — scans prompts/.meta.json and prompts//prompt.meta.json, extracts name, description, and arguments (property names from the JSON schema). Emitted alongside prompts_generated.
icons array passthrough in MCPB manifest: When server.meta.json defines an icons array (with {src, size, theme} objects for light/dark and multi-size variants), the bundler passes it through to manifest.json and copies referenced local files into the bundle. Supports the MCPB spec's themed icon feature for proper dark mode rendering in extension stores.
screenshots passthrough in MCPB manifest: When server.meta.json defines a screenshots array, the bundler passes it through and copies referenced local files into the bundle for extension store listings.
platform_overrides passthrough in MCPB manifest: When server.meta.json defines platform_overrides, the bundler merges it into server.mcp_config.platform_overrides in the manifest. Enables per-platform command, args, and env overrides for cross-platform bundles (e.g., .exe suffix on Windows, DYLD_LIBRARY_PATH on macOS).
_meta passthrough in MCPB manifest: When server.meta.json defines _meta, the bundler passes it through as a top-level manifest field. Supports platform-specific client integration metadata (e.g., Windows Store package_family_name, static initialize/tools/list responses).
localization passthrough in MCPB manifest: When server.meta.json defines localization (with resources path template and default_locale), the bundler passes it through for i18n of user-facing fields.
Fixed
- Registry cache epoch-boundary race: load_cache_if_empty in tools, resources, resource templates, and prompts called date +%s independently of the caller's now timestamp. When the epoch second rolled over between the two calls, LAST_SCAN could exceed now, producing a negative cache age that satisfied any TTL check — skipping the disk scan entirely. Each function now accepts the caller's now to ensure LAST_SCAN <= now.
- Apr 2, 2026
- Date parsed from source:Apr 2, 2026
- First seen by Releasebot:Apr 2, 2026
MCP Bash Framework by Yaniv Golan
[1.1.4] - 2026-04-02
MCP Bash Framework fixes MCPBASH_TOOL_ALLOWLIST output across all config modes, adds client setup snippets and a new AI agents quick start, and ships a CLI wrapper example plus best-practices guidance for safer MCP server builds.
Fixed
- mcp-bash config now includes MCPBASH_TOOL_ALLOWLIST in all output modes: All six output modes (--json, --client claude-desktop, --client cursor, --client claude-cli, --client windsurf, --client librechat, --wrapper/--wrapper-env, --inspector) now emit MCPBASH_TOOL_ALLOWLIST="*" in the generated env block. Previously, the allowlist was omitted, causing all tools to be silently blocked by the default-deny policy when users copied config output verbatim.
Added
Per-Client Snippets in README include MCPBASH_TOOL_ALLOWLIST: All six client setup snippets (Claude Desktop, Claude CLI, LibreChat, OpenAI Agents SDK, Clawdbot, Highlight AI) now show MCPBASH_TOOL_ALLOWLIST="*" with a security note directing users to narrow it for production.
Agent Quick Start section in llms.txt and llms-full.txt: A new "Quick Start for AI Agents Building MCP Servers" section provides step-by-step build instructions, highlights the critical allowlist requirement, and documents CLI wrapper patterns (PATH resolution via mcp_detect_cli, set -uo pipefail error handling).
New example examples/15-cli-wrapper: Demonstrates the most common real-world MCP server pattern — wrapping an external CLI with mcp_detect_cli for PATH resolution, set -uo pipefail for error capture, and SDK helpers for MCP-compliant output.
set -e + CLI wrapper pitfall documented in docs/BEST-PRACTICES.md §4.5: Documents that set -euo pipefail makes error branches unreachable when wrapping CLIs that return non-zero for business errors, with a fix example.
- Mar 2, 2026
- Date parsed from source:Mar 2, 2026
- First seen by Releasebot:Mar 2, 2026
MCP Bash Framework by Yaniv Golan
[1.1.3] - 2026-03-02
Fixed
- Resource annotations now preserved in resources/list: Regular resources discovered via *.meta.json, inline # mcp: headers, or manual registration (register.sh) now expose optional annotations (e.g., audience, priority) through resources/list. Previously, annotations were only surfaced for resource templates; they were silently dropped for regular resources.
- Mar 2, 2026
- Date parsed from source:Mar 2, 2026
- First seen by Releasebot:Mar 2, 2026
MCP Bash Framework by Yaniv Golan
[1.1.2] - 2026-03-02
Fixed
- Initialize instructions now surfaced to clients: Added support for initialize.result.instructions sourced from server.d/server.instructions.md. Instructions are emitted for negotiated protocol versions 2025-03-26 and newer, and omitted for 2024-11-05 for spec-accurate downgrade behavior.
- Feb 3, 2026
- Date parsed from source:Feb 3, 2026
- First seen by Releasebot:Feb 12, 2026
MCP Bash Framework by Yaniv Golan
[1.1.1] - 2026-02-03
Changed
- MCPBASH_LOG_LEVEL boolean normalization: Boolean-like values are now normalized to RFC-5424 levels: true / 1 → debug, false / 0 → info. This supports UI toggles (like Claude Desktop Extensions settings) that map boolean debug settings to MCPBASH_LOG_LEVEL. The normalized value is re-exported so tool subprocesses inherit canonical level names.
Breaking: Existing deployments setting MCPBASH_LOG_LEVEL=true (intending "enable logging") will now get debug-level verbosity instead of info-level.
- Jan 30, 2026
- Date parsed from source:Jan 30, 2026
- First seen by Releasebot:Feb 12, 2026
MCP Bash Framework by Yaniv Golan
[1.1.0] - 2026-01-30
MCP Apps now supports full interactive HTML UIs with auto UI linking, CSPs, and template generation. New scaffold commands and tool UI integration streamline UI creation. Updated docs, pre-push checks, and lint updates ship a complete UI workflow.
Added
- MCP Apps extension support (SEP-1865): Full implementation of the MCP Apps specification for serving interactive HTML UIs. Tools can now provide rich visual interfaces via ui:// resources. Includes auto-discovery of UI resources, CSP header generation, and template-based UI generation.
- Auto-inference of _meta.ui.resourceUri: When a tool has a ui/ subdirectory containing index.html or ui.meta.json, the framework automatically links the tool to its UI resource. No manual _meta.ui configuration needed—the URI is generated as ui://{server-name}/{tool-name}.
- mcp-bash scaffold ui command: New scaffold command for creating UI resources:
- mcp-bash scaffold ui — creates standalone UI in ui//
- mcp-bash scaffold ui --tool — creates UI for existing tool (auto-linked)
- Generates index.html with MCP Apps SDK integration, ui.meta.json with CSP configuration
- --ui flag for mcp-bash scaffold tool: Create a tool with UI in one command: mcp-bash scaffold tool weather --ui. Generates both the tool files and the ui/ subdirectory with working templates.
- UI Resources Guide: New documentation at docs/guides/ui-resources.md covering static HTML UIs, template-based UIs, auto-linking, CSP configuration, and the MCP Apps SDK.
- Pre-push hook: New .githooks/pre-push runs unit tests and bundle validation before pushing, catching issues locally before CI.
- Bash 3.2 lint check: test/lint.sh now sources core libs with /bin/bash to catch bash 4+ features (like declare -gA) before CI fails on macOS.
Fixed
- MCPBASH_HOME override support: The bin/mcp-bash script now respects the MCPBASH_HOME environment variable, allowing the installed binary to use development code during testing.
Documentation
- Added MCP Apps concepts documentation (docs/concepts/mcp-apps.md)
- Added UI SDK reference (docs/reference/ui-sdk.md)
- Added UI templates reference (docs/reference/ui-templates.md)
- Added known limitations section for Claude Desktop MCP Apps support
- Updated docs/PROJECT-STRUCTURE.md to document the ui/ directory
- Updated scaffold READMEs with UI documentation links
- Added MCP Apps to README feature list and spec compliance table
- Jan 26, 2026
- Date parsed from source:Jan 26, 2026
- First seen by Releasebot:Feb 12, 2026
MCP Bash Framework by Yaniv Golan
[1.0.0] - 2026-01-26
mcp-bash reaches 1.0.0 with production-grade stability. Full MCP protocol, mature SDK API, and cross-server validation. Adds Clawdbot and Highlight AI client docs with config steps; signals 1.x stability and no breaking changes.
mcp-bash reaches 1.0.0
mcp-bash reaches 1.0.0 — the framework is now considered stable for production use. The protocol implementation is complete, the SDK API is mature, and the project has been validated across multiple MCP servers and clients.
Added
- Clawdbot client documentation: Added configuration instructions for Clawdbot, which uses mcporter for MCP integration. Config goes in ~/.mcporter/mcporter.json.
- Highlight AI client documentation: Added configuration instructions for Highlight AI. Tested end-to-end. Uses UI-based config: Settings → Connections → Add → Custom command.
Changed
- Version bump to 1.0.0: Signals API stability. The MCP protocol implementation covers the full 2025-11-25 spec (tools, resources, prompts, elicitation, roots, progress, cancellation). No breaking changes are expected in the 1.x series.