내 버전부터 최신까지
지금 쓰는 도구의 버전을 입력하면, 그 뒤로 바뀐 점을 중요한 것부터 모아 보여줍니다.
유형별: ◆ 보안 4 · + 신기능 127 · ~ 수정 83 · · 기타 16
업그레이드 전 확인 breaking · 보안 4개
◆ 보안 4개
-
마크다운 정화 과정에서 발견된 XSS 취약점을 고치기 위해 DOMPurify를 3.4.16으로 업데이트한다
7.8.8
# 보안·권한
원문
[Patch Changes] [#14827](https://github.com/Kilo-Org/kilocode/pull/14827) [`6c79db2`](https://github.com/Kilo-Org/kilocode/commit/6c79db2b80e6a96ceb35750b32a96c795d1e17f6) Thanks [@WebReflection](https://github.com/WebReflection)! - Update DOMPurify to 3.4.16 to fix an XSS vulnerability flagged by Dependabot in markdown sanitization.
-
수학 렌더링 보안 취약점을 해결하기 위해 KaTeX를 0.19.0으로 업데이트한다
7.8.8
# UI
원문
[Patch Changes] [#14848](https://github.com/Kilo-Org/kilocode/pull/14848) [`643cfc3`](https://github.com/Kilo-Org/kilocode/commit/643cfc39a040f86fffd987d597651762077ab4fb) Thanks [@WebReflection](https://github.com/WebReflection)! - Update KaTeX to 0.19.0 to fix a security issue flagged by Dependabot in math rendering.
-
Git 작업의 명령어 실행 취약점을 해결하기 위해 simple-git을 4.0.2로 업데이트한다
7.8.8
# Git·연동
원문
[Patch Changes] [#14834](https://github.com/Kilo-Org/kilocode/pull/14834) [`4e0131e`](https://github.com/Kilo-Org/kilocode/commit/4e0131e41c4f41b612c11910845f5d7b9a4e4c35) Thanks [@WebReflection](https://github.com/WebReflection)! - Update simple-git to 4.0.2 to fix command execution vulnerabilities flagged by Dependabot in Git operations.
-
MCP OAuth 자격 증명을 발급한 인증 서버에 바인딩하여 다른 서버가 토큰을 받지 못하게 한다
7.8.8
# MCP·플러그인
원문
[Patch Changes] [#14889](https://github.com/Kilo-Org/kilocode/pull/14889) [`7f64374`](https://github.com/Kilo-Org/kilocode/commit/7f6437435e3886a4753c87aa79fd2e0d43844035) Thanks [@WebReflection](https://github.com/WebReflection)! - Keep MCP OAuth credentials bound to the authorization server that issued them, so a server that switches authorization servers can no longer receive stored refresh tokens or client secrets.
+ 신기능 2개
-
MCP 서버를 위한 OAuth 로그인을 지원하고 마켓플레이스 설치 후 로그인을 안내한다
7.8.8
# MCP·플러그인
원문
[Minor Changes] [#14724](https://github.com/Kilo-Org/kilocode/pull/14724) [`72fa65f`](https://github.com/Kilo-Org/kilocode/commit/72fa65fb323a8da067694dbc3460ce8f5860af3e) - Support OAuth sign-in for MCP servers: open authorization links through VS Code, prompt to sign in after installing an OAuth-protected server from the Marketplace, surface servers that need sign-in from the chat prompt with recovery actions, and configure a pre-registered OAuth client when a server requires one.
-
고해상도 스트리밍 Agent Manager 브라우저로 로컬 호스트 미리보기에서 공인 HTTPS 페이지와 CDN 리소스를 지원한다
7.8.1
# 원격·클라우드
원문
[Minor Changes] [#13804](https://github.com/Kilo-Org/kilocode/pull/13804) [`9f739b0`](https://github.com/Kilo-Org/kilocode/commit/9f739b045b69c41ea70a7e6f441092797da53d93) - Support public HTTPS pages and public CDN resources in localhost previews with a high-resolution streamed Agent Manager browser. Explain missing browser installations and provide download, retry, and settings actions. Keep clipboard actions ordered, honor page clipboard handlers, and close stalled browser sessions without waiting on renderer input. Preserve native cross-origin request checks while blocking unowned browser pages.
~ 수정 1개
-
MCP OAuth 자격 증명을 발급한 인증 서버에 계속 묶어 두어 저장된 토큰이 다른 서버로 유출되지 않게 한다
7.8.8
# MCP·플러그인
원문
[Patch Changes] [#14889](https://github.com/Kilo-Org/kilocode/pull/14889) [`7f64374`](https://github.com/Kilo-Org/kilocode/commit/7f6437435e3886a4753c87aa79fd2e0d43844035) Thanks [@WebReflection](https://github.com/WebReflection)! - Keep MCP OAuth credentials bound to the authorization server that issued them, so a server that switches authorization servers can no longer receive stored refresh tokens or client secrets.