0.314.2 v9.2.2

low risk

google/comprehensive-rustAug 19, 2026 → Aug 23, 20264 days between releases

What's New

OAuth middleware scoped to `/mcp` prevents intercepting unrelated routes while restoring Basic Auth prompts for UI and REST API

New Features

  • OAuth middleware is now scoped specifically to the `/mcp` transport
  • Browser Basic Auth prompt is restored for UI and REST API

Improvements

  • Security improvement by restricting OAuth middleware to `/mcp` only
  • Added regression coverage for root deployments and custom base paths

Bug Fixes

  • OAuth middleware no longer intercepts unrelated routes
  • Browser Basic Auth prompt is restored for UI and REST API

Upgrade Notes

Clients relying on OAuth on non-MCP routes may need to switch to the `/mcp` transport. The standard Basic Auth prompt for the UI and REST API is restored.

The Two Releases

0.314.2

0.314.2

Aug 19, 2026· 2 months ago

A bug-fix release that reverts a previous change regarding PV power reservation and ensures disabled vehicles are not instantiated in the system.

Full release notes
v9.2.2

v9.2.2

Aug 23, 2026· 2 months ago

This is a patch release that scopes OAuth middleware specifically to the `/mcp` transport to prevent it from intercepting unrelated routes, while restoring the native browser Basic Auth prompt for the UI and REST API.

Full release notes