v1.8.1

parruda/swarmv1.8.1Aug 6, 2026by rdimitrov

AI Summary

A patch release focusing on dependency updates, documentation cleanup, and a security fix regarding GitHub.io domains in token exchange.

Key Highlights

Fixed a security issue rejecting GitHub.io domains in DNS/HTTP token exchange.
Consolidated open dependabot updates.
Removed stale build references from publisher Key Files.

Full Release Notes

## What's Changed
* deploy: update prod to v1.8.0 by @rdimitrov in https://github.com/modelcontextprotocol/registry/pull/1443
* build(deps): bump cloud.google.com/go/kms from 1.31.0 to 1.32.0 by @dependabot[bot] in https://github.com/modelcontextprotocol/registry/pull/1447
* build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.251.0 to 3.253.0 in /deploy by @dependabot[bot] in https://github.com/modelcontextprotocol/registry/pull/1448
* fix(deps): bump golang.org/x/text to v0.39.0 (GO-2026-5970) by @rdimitrov in https://github.com/modelcontextprotocol/registry/pull/1481
* build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 in /deploy by @dependabot[bot] in https://github.com/modelcontextprotocol/registry/pull/1480
* build(deps): consolidate open dependabot updates by @rdimitrov in https://github.com/modelcontextprotocol/registry/pull/1482
* build(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8 by @dependabot[bot] in https://github.com/modelcontextprotocol/registry/pull/1507
* docs: remove Tadas as WG Lead by @tadasant in https://github.com/modelcontextprotocol/registry/pull/1493
* build(deps): bump github.com/danielgtaylor/huma/v2 from 2.39.0 to 2.39.1 by @dependabot[bot] in https://github.com/modelcontextprotocol/registry/pull/1489
* build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.253.0 to 3.255.0 in /deploy by @dependabot[bot] in https://github.com/modelcontextprotocol/registry/pull/1490
* build(deps): bump cloud.google.com/go/kms from 1.32.0 to 1.33.0 by @dependabot[bot] in https://github.com/modelcontextprotocol/registry/pull/1491
* build(deps): bump docker/login-action from 4.4.0 to 4.6.0 in the actions group by @dependabot[bot] in https://github.com/modelcontextprotocol/registry/pull/1492
* fix(auth): reject github.io domains in DNS/HTTP token exchange (org namespace takeover) by @SashaMIT in https://github.com/modelcontextprotocol/registry/pull/1506
* docs: remove stale build.sh reference from publisher Key Files by @latent-9 in https://github.com/modelcontextprotocol/registry/pull/1504
* fix(deploy): cache bulk registry reads by @rdimitrov in https://github.com/modelcontextprotocol/registry/pull/1509

## New Contributors
* @SashaMIT made their first contribution in https://github.com/modelcontextprotocol/registry/pull/1506
* @latent-9 made their first contribution in https://github.com/modelcontextprotocol/registry/pull/1504

**Full Changelog**: https://github.com/modelcontextprotocol/registry/compare/v1.8.0...v1.8.1