## What's Changed
* Fix normalizeCommand() splitting absolute paths containing spaces (backporting PR #553 for v1.x) by @debiprasad in https://github.com/laravel/boost/pull/726
## New Contributors
* @debiprasad made their first contribution in https://github.com/laravel/boost/pu
Release v1.15.1 contains somewhat hacky workaround fixes for Claude Cowork / Claude Desktop due to a bizarre issue they have passing invalid json to list and dict payload required tools. It will be removed once they come back into compliance with the MCP client spec.
## What's
## What's new
**Feature 4 from upgrades PRD: Blast radius depth scoring**
`get_blast_radius` now surfaces how risky a change is, not just which files it touches.
### New response fields (always present)
- `direct_dependents_count` — files at depth 1 (direct importers of the ch
Fix Windows CI: trusted_folders tests failing due to backslash-escaped paths in JSON
`_platform_path_str` was using `str(Path(...))` which on Windows produces `C:\work` with backslashes. When embedded raw into an f-string JSON literal, this creates invalid \escape sequences, cau
## What's new
### Trusted folder allowlist for `index_folder()` (PR #175 by @tmeckel)
Adds a `trusted_folders` config key that restricts which paths `index_folder()` is allowed to index — without a global disable flag.
**Whitelist mode (default):** only listed roots and their
## What's new
**New tool: `check_freshness`** — compare the git HEAD SHA stored at index time against the current HEAD for locally indexed repos.
- Returns `fresh` (bool), `indexed_sha`, `current_sha`, `commits_behind`
- GitHub-indexed repos return `is_local=False` with a clear
## What's new
**UX: structured file-cap warnings** — `index_folder` and `index_repo` now surface `files_discovered`, `files_indexed`, and `files_skipped_cap` fields plus a human-readable warning when the file cap is hit (previously a silent "note").
**search_symbols + get_symbo
### Fixed
- Use accessor method in `server_context_with_meta` instead of ivar (#273)
- Reject duplicate SSE connections with 409 to prevent stream hijacking
- Add community health files and improve docs
- feat: batch keyword scanning for local rank tracker (#68)
- fix: shorten server.json description to fit MCP Registry 100-char limit (#66)
- feat: add maps_local_rank_tracker for local SEO grid ranking (#65)
<!-- Release-Triggered-By: eleftherias -->
## What's Changed
* Handle shutdown timeout in thv HTTP server by @JAORMX in https://github.com/stacklok/toolhive/pull/4328
* Preserve prompt message structure through vMCP relay by @JAORMX in https://github.com/stacklok/toolhive/pull/4