Release notes for the Vaelor MCP code-intelligence server.https://vaelor.ai/enhttps://vaelor.ai/changelog#v1.75.3https://vaelor.ai/changelog#v1.75.3Fixed: repo_search: pass last push, topics and archived to the summarizerWed, 14 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.75.2https://vaelor.ai/changelog#v1.75.2Fixed: callgraph: resolve Go call sites under Go's scoping rulesMon, 12 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.75.1https://vaelor.ai/changelog#v1.75.1Fixed: autoindex: re-run the index pass periodically so head_sha follows mainMon, 12 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.75.0https://vaelor.ai/changelog#v1.75.0Added: http: bearer-token auth on /mcp and /api with off/report/enforce rolloutSun, 11 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.74.3https://vaelor.ai/changelog#v1.74.3Fixed: mcp: back to stateless + go-mcpserver v0.21.0 (supersedes #912/#938)Sat, 10 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.74.2https://vaelor.ai/changelog#v1.74.2Fixed: mcp: 6h session idle TTL + vaelor_mcp_session_expired_totalSat, 10 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.74.1https://vaelor.ai/changelog#v1.74.1Fixed: security: harden repo file reads against symlinks and oversized filesSat, 10 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.74.0https://vaelor.ai/changelog#v1.74.0Added: gocache: trim stale Go build-cache entries in the backgroundSat, 10 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.73.6https://vaelor.ai/changelog#v1.73.6Fixed: goanalysis: allowlist env, no cgo, no direct fetch for untrusted Go rootsSat, 10 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.73.5https://vaelor.ai/changelog#v1.73.5Fixed: security: harden SCIP indexing and PR webhook against untrusted reposSat, 10 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.73.4https://vaelor.ai/changelog#v1.73.4Fixed: oxbrowser: authenticate every ox-browser call via go-kit svcauth (ox-browser#173)Sat, 10 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.73.3https://vaelor.ai/changelog#v1.73.3Fixed: mcp: enable stateful sessions so the standalone GET SSE stream works; review: review_delta/review_pr return building status on cold call graphThu, 08 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.73.2https://vaelor.ai/changelog#v1.73.2Fixed: impact: keep the direct-caller page inline when the transitive list overflows; impact: size snippet-shedding fixtures from themselves; gate direct-page on something to dropThu, 08 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.73.1https://vaelor.ai/changelog#v1.73.1Fixed: callgraph: say which wait a typed-load degrade is inThu, 08 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.73.0https://vaelor.ai/changelog#v1.73.0Added: impact: max_callers/offset paging and opt-in call snippets (#892, #896)Thu, 08 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.9https://vaelor.ai/changelog#v1.72.9Fixed: goanalysis: -trimpath in shared GOFLAGS — reuse compile cache across checkouts (fixes #893)Wed, 07 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.8https://vaelor.ai/changelog#v1.72.8Fixed: callgraph: bound the typed go/packages load (export-data deps, shared + budgeted)Wed, 07 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.7https://vaelor.ai/changelog#v1.72.7Fixed: research: use jeff choice question — noul collapses on pathsWed, 07 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.6https://vaelor.ai/changelog#v1.72.6Fixed: research: size jeff batch to the measured latency budgetWed, 07 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.5https://vaelor.ai/changelog#v1.72.5Fixed: research: jeff topicality arbitration against hub-file dominationWed, 07 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.4https://vaelor.ai/changelog#v1.72.4Fixed: parser: populate Symbol.Receiver for Go methodsWed, 07 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.3https://vaelor.ai/changelog#v1.72.3Fixed: callgraph: no edge over a wrong edge — bare-name ambiguity and builtin guardWed, 07 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.2https://vaelor.ai/changelog#v1.72.2Fixed: callgraph: redesign go/types warm lifecycle around a per-root registryWed, 07 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.1https://vaelor.ai/changelog#v1.72.1Fixed: impact: resolve typed call edges by definition site; type-check test filesWed, 07 Oct 2026 00:00:00 GMThttps://vaelor.ai/changelog#v1.72.0https://vaelor.ai/changelog#v1.72.0Added: cli: stdio subcommand (canonical cobra MCP pattern)Wed, 07 Oct 2026 00:00:00 GMT