v1.5.9 v1.18.1
medium risk
Rouf0x/splatfpvOct 4, 2026 → Oct 5, 20260 days between releases
What's New
Fixes MCP server startup and VNC port exposure, pins browser binaries.
Breaking Changes
- VNC binding behavior changed: non-loopback native binds now require `VNC_PASSWORD`.
New Features
- Native VNC security behavior updated to prevent port exposure.
Improvements
- Browser binaries pinned to tested Camoufox release for stability.
- Dependency pins updated, including patched `hono`.
Bug Fixes
- Bundled MCP server now starts correctly with included `package.json`.
- Container VNC configuration fixed to prevent unintended port exposure.
Upgrade Notes
If using native VNC on non-loopback interfaces, explicitly set `VNC_RFB_BIND` and `VNC_PASSWORD`. The bundled MCP server now starts correctly. Browser binaries are pinned to `152.0.4-beta.30`.
The Two Releases
v1.5.9
Clypra v1.5.9
Oct 4, 2026· 17 days ago
Minimal release notes: "Automated multi-platform release bundle — macOS (arm64, x64), Windows (x64, arm64), Linux (x64, arm64)."
Full release notesv1.18.1
v1.18.1 — VNC compatibility and MCP startup fix
Oct 5, 2026· 17 days ago
Fixes the bundled MCP server startup and refines VNC container configuration to prevent unintended port exposure.
Full release notes