Starstruk Logo MarkStarstruk

0.21.2-hotfix-3

elizaOS/eliza0.21.2-hotfix-3Apr 14, 2026by cliffhall

AI Summary

This release focuses on dependency updates and security hardening, including sanitizing error responses, adding CORS proxy support, and configuring npm publishing for OIDC.

Key Highlights

  • Sanitized error responses to prevent stack trace exposure
  • CORS proxy fetch for authentication
  • Migrated npm publishing to OIDC trusted publishing

New Features

  • Horizontal scrolling for long values in JSON view
  • Proxy fetch for auth (to avoid CORS issues)
  • OIDC trusted publishing setup

Full Release Notes

## What's Changed
* Fix decimal typing behavior for number inputs in tools form by @MumuTW in https://github.com/modelcontextprotocol/inspector/pull/1127
* fix: ensure DCR always registers both redirect URIs by @asoorm in https://github.com/modelcontextprotocol/inspector/pull/1173
* fix: add horizontal scrolling for long values in json view by @Dinesht04 in https://github.com/modelcontextprotocol/inspector/pull/1177
* Inspector client: Added proxy fetch for use by auth (to avoid CORS issues) by @BobDickinson in https://github.com/modelcontextprotocol/inspector/pull/1047
* chore(deps): bump hono from 4.12.1 to 4.12.2 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1117
* chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1125
* chore(deps): bump actions/attest-build-provenance from 3 to 4 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1126
* chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1136
* chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1137
* chore(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in https://github.com/modelcontextprotocol/inspector/pull/1138
* fix: validate serverInfo.websiteUrl before rendering as link by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/1186
* fix(server): sanitize error responses to prevent stack trace exposure by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/1187
* chore: bump version to 0.21.2 by @olaservo in https://github.com/modelcontextprotocol/inspector/pull/1194
* ci: switch npm publish to OIDC trusted publishing by @pcarleton in https://github.com/modelcontextprotocol/inspector/pull/1199
* Update package.json to contain repository.url in for npm trusted publisher setup by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/1201
* fix: add repository field to workspace package.json files for npm trusted publishing by @cliffhall in https://github.com/modelcontextprotocol/inspector/pull/1202

## New Contributors
* @MumuTW made their first contribution in https://github.com/modelcontextprotocol/inspector/pull/1127
* @Dinesht04 made their first contribution in https://github.com/modelcontextprotocol/inspector/pull/1177

**Full Changelog**: https://github.com/modelcontextprotocol/inspector/compare/0.21.1...0.21.2-hotfix-3