---
summary: "MCP 2026-07-28 support, explicit stateless HTTP, and accurate dataframe truncation disclosure."
breaking: false
security: false
---

# 0.4.12 — 2026-08-23

## Added

- **Community health files** — contribution, conduct, and private vulnerability-reporting guidance now ship with the repository.

## Changed

- **MCP protocol support** — `@cyanheads/mcp-ts-core` 0.12.3 serves revision 2026-07-28 alongside the 2025 revisions, rejects undeclared root tool inputs, and advertises an error envelope clients can validate on failed calls.
- **HTTP session mode** — source runs, container deployments, and documentation now select `stateless` explicitly.
- **Runtime tooling** — Bun 1.4, TypeScript 7, the split typecheck/build configuration, and the framework's current scripts and skills are adopted.

## Fixed

- **`bls_dataframe_query` truncation** — row-limit clipping is disclosed even when the provider reports the capped row count; enrichment names the applied cap and `preview` may no longer exceed `row_limit`.

## Dependencies

- `@cyanheads/mcp-ts-core` `^0.10.14` → `^0.12.3`
- `@duckdb/node-api` `^1.5.4-r.1` → `^1.5.5-r.4`
- `better-sqlite3` `^12.11.1` → `^13.0.3`
- `@biomejs/biome` `^2.5.2` → `^2.5.9`
- `@types/node` `^26.1.0` → `^26.2.0`
- `tsc-alias` `^1.9.0` → `^1.9.2`
- `typescript` `^6.0.3` → `^7.0.2`
- `vitest` `^4.1.10` → `^4.1.11`