Starstruk Logo MarkStarstruk

0.21.2-hotfix-3

TabbyML/tabby0.21.2-hotfix-3Apr 14, 2026by cliffhall

AI Summary

This release focuses on bug fixes and security improvements for the Inspector client, including UI enhancements like horizontal scrolling for long JSON values and proxy support for authentication. It also updates CI/CD pipelines to use OIDC trusted publishing.

Key Highlights

  • Added proxy fetch capability for authentication to avoid CORS issues
  • Enhanced JSON view with horizontal scrolling for long values
  • Improved security by sanitizing error responses to prevent stack trace exposure
  • Fixed decimal typing behavior for number inputs in tools form
  • Updated CI/CD to use OIDC trusted publishing for npm

New Features

  • Added proxy fetch for authentication (to avoid CORS issues)
  • Horizontal scrolling for long values in JSON view

Full Release Notes

## What's Changed
* Fix decimal typing behavior for number inputs in tools form by @MumuTW in https://github.com/modelcontextprotocol/inspector/pull/1127
* fix: ensure DCR always registers both redirect URIs by @asoorm in https://github.com/modelcontextprotocol/inspector/pull/1173
* fix: add horizontal scrolling for long values in json view by @Dinesht04 in https://github.com/modelcontextprotocol/inspector/pull/1177
* Inspector client: Added proxy fetch for use by auth (to avoid CORS issues) by @BobDickinson in https://github.com/modelcontextprotocol/inspector/pull/1047
* chore(deps): bump hono from 4.12.1 to 4.12.2 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1117
* chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1125
* chore(deps): bump actions/attest-build-provenance from 3 to 4 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1126
* chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1136
* chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1137
* chore(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1138
* fix: validate serverInfo.websiteUrl before rendering as link by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/1186
* fix(server): sanitize error responses to prevent stack trace exposure by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/1187
* chore: bump version to 0.21.2 by @olaservo in https://github.com/modelcontextprotocol/inspector/pull/1194
* ci: switch npm publish to OIDC trusted publishing by @pcarleton in https://github.com/modelcontextprotocol/inspector/pull/1199
* Update package.json to contain repository.url in for npm trusted publisher setup by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/1201
* fix: add repository field to workspace package.json files for npm trusted publishing by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/1202

## New Contributors
* @MumuTW made their first contribution in https://github.com/modelcontextprotocol/inspector/pull/1127
* @Dinesht04 made their first contribution in https://github.com/modelcontextprotocol/inspector/pull/1177

**Full Changelog**: https://github.com/modelcontextprotocol/inspector/compare/0.21.1...0.21.2-hotfix-3