v0.11.2

modelcontextprotocol/registryv0.11.2Jul 2, 2026by github-actions[bot]

AI Summary

This release prioritizes security improvements for the store, updates the WhatsApp protocol library for better compatibility, and fixes sync and channel handling issues.

Key Highlights

Security fix: Escaped SQLite file URI path delimiters to prevent connection parameter manipulation.
Updated `whatsmeow` library for current protocol metadata and pairing/connect handling.
Improved sync accuracy with linked-device presence and push notifications on shutdown.
Fixed WhatsApp connectivity issues and silent cache persistence failures.

Full Release Notes

## Changelog

### Added

### Security

- Store: escape SQLite file URI path delimiters so store names cannot alter connection parameters. (thanks @vincentkoc)
- Docs: escape raw HTML in generated-site link labels and give duplicate headings stable unique IDs. (thanks @vincentkoc)

### Fixed

- WhatsApp compatibility: update `whatsmeow` for current protocol metadata, privacy tokens on more request types, and pairing/connect handling.
- Sync: keep linked-device presence accurate while sync is running and send unavailable presence on shutdown so phones resume push notifications. (#283)
- WhatsApp connectivity: update `whatsmeow` for the current WhatsApp protocol and fix `405 (Client Outdated)` failures. (#280)
- Channels: report local cache persistence failures instead of silently returning incomplete success. (thanks @vincentkoc)
- Cleanup: reject non-positive `chats cleanup --days` values before opening the store. (thanks @vincentkoc)