Version 0.0.57

• Chore: Update mobilewright to 0.0.41 (#341)

Version 0.0.56

• Chore: Update mobilewright to 0.0.38 (#338)
• Fix: Restore mcp-publisher functionality (#337)

Version 0.0.55

• General: Replace mobilecli with mobilewright SDK (#334)
• General: Bump fast-xml-parser to 5.8.0 to fix security vulnerability (#335)

Version 0.0.54

• Server: Update mobilecli to 0.3.70
• iOS: Fixed cases where testmanagerd would get Device Kit stuck in a black screen of death
• iOS: Added 'placeholder' to view tree response

Version 0.0.53

• Server: Add mobile_list_crashes tool to list crash reports on a device
• Server: Add mobile_get_crash tool to retrieve full crash report content
• Server: Upgrade mobilecli from 0.2.0 to 0.3.68
• iOS: Replaced use of WebdriverAgent with iOS Device Kit (open source, apache license)
• CI: Restrict contents permission to read
• CI: Remove Java setup step from build workflow

Version 0.0.52

• Server: Block cross-origin requests on SSE transport (#311)
• Server: Warn when SSE server starts without MOBILEMCP_AUTH set (#311)
• Server: Reject concurrent SSE connections instead of silently replacing them (#311)
• Server: Clear SSE transport on connection close to allow reconnection (#311)
• Server: Update mobilecli dependency from @mobilenext/mobilecli to mobilecli 0.2.0 (#316)
• CI: Fix script injection by passing github.ref_name through env vars (#314)
• CI: Use npm ci instead of npm install for reproducible builds (#314)
• CI: Pin mcp-publisher to version 1.5.0 (#314)
• CI: Remove npm update from tag release to preserve lockfile integrity (#314)

Version 0.0.51

• Server: Replace --port with --listen flag accepting [host:]port format, default to localhost (#306)
• Server: Add optional Bearer token auth via MOBILEMCP_AUTH env variable (#306)
• Server: Add MOBILEMCP_DISABLE_TELEMETRY env variable to opt out of anonymous telemetry (#305)
• Server: Security update for path-to-regexp package (#307)

Version 0.0.50

• Server: Restrict open_url tool to http/https schemes unless MOBILEMCP_ALLOW_UNSAFE_URLS=1 is set (#299) thanks to @manthanghasadiya for reporting this.

Version 0.0.49

• Server: Fix path traversal in save screenshot and record video (#296) thanks to @AbhiTheModder for reporting this.

Version 0.0.48

• Server: Security updates for fast-xml-parser (#292)
• Server: Fix handling errors in getDeviceType to prevent empty device list (#286) thanks to @ls-andy