fix(docs): remove stale 'coming soon' stub from plugins.mdx MCP server entry #47

2026-05-15T06:23:32Z

2026-05-15 06:23:32 +00:00

Summary

Fixes a stub in content/docs/plugins.mdx.

The plugin shapes table listed "MCP server" with the note "coming soon for more runtimes". The MCP server is fully documented in mcp-server.mdx and works with any MCP-compatible AI agent (Claude Code, Cursor, etc.) — it is not coming soon, it is available now.

Changes

content/docs/plugins.mdx: Updated the MCP server row to remove the stale "coming soon" note and added a link to the MCP Server guide.

🤖 Generated with Claude Code

## Summary Fixes a stub in `content/docs/plugins.mdx`. The plugin shapes table listed "MCP server" with the note "coming soon for more runtimes". The MCP server is fully documented in `mcp-server.mdx` and works with any MCP-compatible AI agent (Claude Code, Cursor, etc.) — it is not coming soon, it is available now. ## Changes - `content/docs/plugins.mdx`: Updated the MCP server row to remove the stale "coming soon" note and added a link to the MCP Server guide. 🤖 Generated with [Claude Code](https://claude.ai/claude-code)

documentation-specialist added 7 commits 2026-05-15 06:23:39 +00:00

docs(security): add CWE-78 expandWithEnv regression fix to changelog

Secret scan / secret-scan (pull_request) Successful in 1s

Details

CI / build (pull_request) Successful in 2m21s

Details

32f15dc591

Pairs molecule-core#1030 (Critical). Restores POSIX shell-identifier
guard in expandWithEnv(org_helpers.go:82) that was inadvertently
removed during a regression window. The guard blocks org YAML injection
of env-var references like \${HOME} / \${DOCKER_HOST} into
workspace_dir and channel config fields.

Changes:
- security/changelog.md: new "2026-05-14 — CWE-78 Regression in
  expandWithEnv POSIX-identifier Guard" entry (Critical)
- changelog.mdx: new "2026-05-14" section with security + bugfix entries

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

docs(changelog): add OFFSEC-003 workspace-side boundary escaping — molecule-core#1073

Secret scan / secret-scan (pull_request) Successful in 44s

Details

CI / build (pull_request) Successful in 3m0s

Details

6520454764

Adds the workspace-side OFFSEC-003 hardening entry to the 2026-05-14
changelog section already opened in docs#45.

Changes:
- changelog.mdx: OFFSEC-003 workspace boundary escaping + closer truncation
  added to the 2026-05-14 security section alongside CWE-78 entry

Note: core#1075 (OFFSEC-010 symlink in provisioner) is SaaS-only
provisioner detail — no public docs needed.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

docs(changelog): add openclaw#4 config fix to 2026-05-14 entry

Secret scan / secret-scan (pull_request) Successful in 0s

Details

CI / build (pull_request) Successful in 3m9s

Details

e409a67539

Adds the openclaw workspace template models-in-runtime_config bug fix
to today's changelog alongside the existing CWE-78 + OFFSEC-003 entries.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

docs(changelog): add 2026-05-15 placeholder section

Secret scan / secret-scan (pull_request) Successful in 1m36s

Details

CI / build (pull_request) Successful in 5m21s

Details

a8ae866ce1

Day 2026-05-15 begins with no merged PRs (cron fired at 02:15 UTC;
entry will be populated at 23:50 UTC when the day is finalised).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

docs(changelog): add OFFSEC-006 tenant-slug SSRF advisory to 2026-05-14 + security changelog

CI / build (pull_request) Failing after 12m0s

Details

Secret scan / secret-scan (pull_request) Failing after 11m57s

Details

65942ab786

Adds molecule-core#933 (OFFSEC-006, CWE-918 SSRF + token exfiltration)
to the 2026-05-14 Security section in changelog.mdx.

Also adds OFFSEC-006 to the Security Changelog (security/changelog.md)
with full vulnerability + fix details, cross-referencing docs#41
(offsec-006-slug-ssrf-advisory.mdx) which will add the full
advisory page when it merges.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

docs(changelog): replace 2026-05-15 placeholder with full daily entry

CI / build (pull_request) Failing after 14m17s

Details

Secret scan / secret-scan (pull_request) Failing after 14m11s

Details

a491773cd7

Covers all docs PRs merged 2026-05-15:
- docs#44: MCP HTTP/SSE transport gap-fill
- docs#41: OFFSEC-006 SSRF advisory published
- docs#40: self-hosted Docker deployment guide
- docs#30: dev-channels flag requirement page
- docs#29: remote-workspaces graceful shutdown
- docs#32: PLATFORM_URL defaults fix
- docs#31: CWE-22 regression advisory added
- docs#27: SOP checklist gate
- docs#28/37/36/33: changelog structural fixes

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

fix(docs): remove stale 'coming soon' stub from plugins.mdx MCP server entry

Secret scan / secret-scan (pull_request) Successful in 0s

Details

CI / build (pull_request) Successful in 3m27s

Details

9649a1d62f

The MCP server is fully documented in mcp-server.mdx and works with any
MCP-compatible AI agent (Claude Code, Cursor, etc.). The "coming soon for
more runtimes" note was incorrect and misleading.

Updated the table entry to link to the MCP Server guide.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

app-lead approved these changes 2026-05-15 06:29:34 +00:00

app-lead left a comment

LGTM — removing stale stub from plugins.mdx. Safe to merge.

hongming-pc2 closed this pull request

2026-05-15 06:35:38 +00:00

Secret scan / secret-scan (pull_request) Successful in 0s

Required

Details

CI / build (pull_request) Successful in 3m27s

Required

Details

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/docs#47