[JanGoebel]

Summary

The release workflow writes the annotated tag message into the .vipb's <Release_Notes> with -replace, using the message as the replacement text. .NET reads $_, $&, $` and $' in it as substitutions, so a tag message containing $_ put a whole .vipb line into the package's release notes. This doubles every $ first. The GitHub release text was never affected.

Tag message	<Release_Notes> before	after
Costs $_ and $&	Costs <Release_Notes>old</Release_Notes> and <Release_Notes>old</Release_Notes>	Costs $_ and $&

Changes

• tools/ci/release.workflow.yml (modified): step 4 escapes $ as $$ before the replacement, with a comment saying why.

Verified

• Windows PowerShell 5.1: reproduced the wrong output with the old line, then ran the new lines against a copy of src/LabVIEW MCP Server SDK.vipb with a multi-line message containing $_, $&, $1, <tags> and &. The file is still valid XML and <Release_Notes> reads back exactly as the message.

Not verified

• Not run in the workflow itself: it only runs on a tag.

Known rough edges

None.

Maintainer steps

Apply the same edit to the live .github/workflows/release.yml, step "4. Inject the Release Notes into the VIPB". Replace

          $safeMsg = [System.Security.SecurityElement]::Escape($tagMsg)

with

          #    -replace reads $_, $& and $1 in the replacement text as
          #    substitutions, so double every $ to keep the message as written.
          $safeMsg = [System.Security.SecurityElement]::Escape($tagMsg).Replace('$', '$$')

After that the template and the live file are identical again (apart from CRLF). Until then, keep $ out of tag messages.

🤖 Generated with Claude Code

[github-actions]

Tests

✅ All 64 tests passed.

Per-test results

Test	VI	Result	Checks
Test 1: Initialize	Test Initialize.vi	✅ pass	Assert True: pass
Test 2: Initialized	Test Initialized.vi	✅ pass	Assert True: pass
Test 3: tools/list	Test tools list.vi	✅ pass	Assert True: pass
Test 4: prompts/list	test prompts list.vi	✅ pass	Assert True: pass
Test 5: resources/list	test resources list.vi	✅ pass	Assert True: pass
Test 6: tools call	test tools call.vi	✅ pass	Assert True: pass
Test 7: empty JSON object is an invalid request	test empty msg.vi	✅ pass	Assert True: pass
Test 8: call broken tool	test broken tool.vi	✅ pass	Assert True: pass
Test 6: tools call	test tools call array.vi	✅ pass	Assert True: pass
Test 9: GET is rejected with 405	test http get rejected.vi	✅ pass	GET -> 405 with Allow: POST and error -32600: pass
Test 10: Origin validation	test http origin.vi	✅ pass	Origin http://evil.example -> 403 with error -32600: pass Origin http://localhost:6274 -> 200 with result: pass
Test 11: MCP-Protocol-Version validation	test http protocol version.vi	✅ pass	MCP-Protocol-Version 1999-01-01 -> 400 with error -32022 (Unsupported protocol version, the MCP 2026-07-28 code in both eras): pass MCP-Protocol-Version 2025-06-18 -> 200 with result: pass
Test 12: notification answered with 202	test notification accepted.vi	✅ pass	notifications/initialized -> 202 with empty body: pass
Test 13: request with id answered with 200	test request status.vi	✅ pass	tools/list with id 1 -> 200 with result and id 1: pass
Test 14: unknown method	test unknown method.vi	✅ pass	does/not/exist with id 5 -> 200 with error -32601 and id 5: pass
Test 15: unknown notification	test unknown notification.vi	✅ pass	notifications/cancelled -> 202 with empty body: pass
Test 16: ping	test ping.vi	✅ pass	ping with id 3 -> 200 with result {} and id 3: pass
Test 17: string request id	test string id.vi	✅ pass	tools/list with id "abc-1" -> 200 with result and id "abc-1": pass
Test 18: unknown prompt	test unknown prompt.vi	✅ pass	prompts/get no-such-prompt with id 7 -> JSON-RPC error -32602 with id 7, no status/source: pass
Test 19: unknown resource	test unknown resource.vi	✅ pass	resources/read of an unknown uri with id 8 -> JSON-RPC error -32002 with id 8, no status/source: pass
Test 20: resources/read returns UTF-8 text unchanged	test resource text utf8.vi	✅ pass	text of labview://fixture_utf8 decodes to the bytes of fixture_utf8.txt: pass
Test 21: resources/read returns a binary file as Base64	test resource blob.vi	✅ pass	blob of labview://fixture_binary is the Base64 of the bytes of fixture_binary.png: pass
Test 22: unknown tool	test unknown tool.vi	✅ pass	tools/call no_such_tool -> error -32602 with message Unknown tool: no_such_tool and id 22: pass
Test 23: tools/call with arguments that are not an object	test tool call without arguments.vi	✅ pass	tools/call fake_tool_add with arguments 5 -> error -32602 with message Invalid arguments... and id 23: pass
Test 24: broken tool is a tool execution error	test broken tool message.vi	✅ pass	tools/call fake_tool_broken_vi -> result with isError true and a text that says not executable: pass
Test 25: prompts/get without arguments	test prompt without arguments.vi	✅ pass	prompts/get fake_prompt_concatanate_strings without arguments -> result with messages: pass
Test 26: request without method	test request without method.vi	✅ pass	a message with id 26 and no method -> error -32600 with id 26: pass
Test 27: malformed JSON	test malformed json.vi	✅ pass	truncated JSON -> error -32700 with id null: pass
Test 28: array inputs say what their items are	test tools list array items.vi	✅ pass	fake_tool_arrays: pass
Test 29: protocol version negotiation	test protocol version negotiation.vi	✅ pass	initialize asking for 2024-11-05 -> protocolVersion 2024-11-05: pass initialize asking for 1999-01-01 -> protocolVersion 2025-11-25 (the newest legacy version): pass
Test 30: resources/templates/list	test resource templates list.vi	✅ pass	resources/templates/list -> result with resourceTemplates []: pass
Test 31: tools/call without arguments	test tool call default arguments.vi	✅ pass	tools/call fake_tool_add without arguments -> result with the sum 0, no error, id 31: pass
Test 32: a tool that returns an error sets isError	test tool error result.vi	✅ pass	fake_tool_return_error with status true -> result with isError true, code and source still in the content: pass fake_tool_return_error with status false -> result without isError: pass
Test 33: internal errors show no LabVIEW internals	test internal error message.vi	✅ pass	prompts/get fake_prompt_broken_vi -> error -32603 with a message without call chain, markup, tags or path: pass
Test 34: prompts/list says which arguments are required	test prompts list required.vi	✅ pass	fake_prompt_required_argument: pass
Test 35: prompts/get checks required arguments	test prompt required argument.vi	✅ pass	prompts/get fake_prompt_required_argument without topic -> error -32602 that names topic, id 36: pass prompts/get fake_prompt_required_argument with topic -> result whose text contains both argument values: pass
Test 36: JSON-RPC batch	test batch.vi	✅ pass	batch of ping (id 38), a notification and tools/list (id b) -> 200 with an array of two answers in that order: pass batch of two notifications -> 202 with empty body: pass empty batch -> error -32600 with id null: pass
Test 37: a JSON value that is not an object	test non object message.vi	✅ pass	body 5 -> error -32600 with id null: pass body "text" -> error -32600 with id null: pass body null -> error -32600 with id null: pass
Test 38: tools/call checks required arguments	test tool required arguments.vi	✅ pass	tools/call fake_tool_required_input without arguments -> result with isError true and the text Missing required argument(s): b, a (the order of inputSchema.required), no JSON-RPC error, id 40: pass tools/call fake_tool_required_input with arguments {} -> result with isError true naming b and a, no JSON-RPC error, id 41: pass tools/call fake_tool_required_input with only a -> result with isError true naming only b, no JSON-RPC error, id 42: pass tools/call fake_tool_required_input with a 2 and b 3 -> result 6, no error, id 43: pass
Test 39: initialize with an unknown protocol version	test protocol version fallback.vi	✅ pass	initialize asking for 1999-01-01 -> protocolVersion is the first entry of Supported Protocol Versions.vi: pass
Test 40: initialize reports the LabVIEW version	test labview version.vi	✅ pass	initialize -> serverInfo.additionalDetails.labviewVersion equals the Version Number of this LabVIEW: pass
Test 41: tools/list shows the MCP names of special labels	test tools list mcp names.vi	✅ pass	tools/list fake_tool_special_labels -> Length (mm) and Factor #1 & 50% are listed as length__mm_ and factor__1___50_ in properties and in required, id 44: pass tools/list fake_tool_special_labels -> every name in properties and required matches ^[a-zA-Z0-9_-]{1,64}$: pass
Test 42: tools/call reaches special labels by their MCP names	test tools call mcp names.vi	✅ pass	tools/call fake_tool_special_labels with length__mm_ 2.5 and factor__1___50_ 4 -> result {"result__mm_":10}, no error, id 45: pass
Test 43: Add Tool refuses inputs whose MCP names clash	test add tool name clash.vi	✅ pass	Add Tool fake tool name clash.vi with the inputs a b and a_b -> error 5010 naming both controls and the MCP name a_b: pass tools/list after the refused Add Tool -> fake_tool_name_clash is not listed, id 46: pass
Test 44: Add Prompt refuses arguments whose MCP names clash	test add prompt name clash.vi	✅ pass	Add Prompt fake prompt name clash.vi with the arguments a b and a_b -> error 5010 naming both controls and the MCP name a_b: pass prompts/list after the refused Add Prompt -> fake_prompt_name_clash is not listed, id 47: pass
Test 45: 3D arrays and arrays of paths, enums and clusters say what their items are	test tools list array shapes.vi	✅ pass	fake_tool_array_shapes: pass fake_tool_array_shapes: pass fake_tool_array_shapes: pass fake_tool_array_shapes: pass
Test 46: timestamps, clusters and types without a JSON type are described in tools/list	test tools list schema details.vi	✅ pass	fake_tool_array_shapes: pass fake_tool_array_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass
Test 47: tools/call converts timestamps, clusters, enums and 2D and 3D arrays	test tools call schema shapes.vi	✅ pass	fake_tool_array_shapes with a 3D array [[[1,2],[3,4]],[[5,6],[7,8]]] -> no isError, the tool gets all 8 elements: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes: pass fake_tool_schema_shapes with timestamp 2026-10-17T12:34:56Z -> no isError, time out 2026-10-17T12:34:56.000Z: pass
Test 48: every array schema in tools/list says what its items are	test tools list every array has items.vi	✅ pass	tools/list of the test server: pass
Test 49: tools/list gives element descriptions, integer ranges, data entry limits, units and defaults	test tools list descriptions defaults ranges.vi	✅ pass	fake_tool_schema_shapes: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass fake_tool_schema_details: pass
Test 50: tools/call returns structuredContent without picture outputs, and none on isError results	test tools call structured content.vi	✅ pass	tools/call fake_tool_return_error with status false (id 502) -> structuredContent carries the error cluster output as an ordinary object: pass tools/call fake_tool_return_error with status true (id 501) -> isError true and no structuredContent: pass fake_tool_picture_outputs: pass tools/call fake_tool_required_input without arguments (id 503) -> isError true and no structuredContent: pass tools/call fake_tool_picture_outputs (id 50) -> structuredContent is present and equals the text JSON without its picture placeholder: pass fake_tool_picture_outputs: pass
Test 51: tools/list gives an outputSchema that matches structuredContent	test tools list output schema.vi	✅ pass	fake_tool_picture_outputs: pass fake_tool_picture_outputs: pass tools/list fake_tool_picture_outputs -> outputSchema is an object schema whose properties and required are count, label, mode and time: pass fake_tool_picture_outputs: pass tools/list fake_tool_no_inputs_outputs (no outputs) -> no outputSchema: pass
Test 52: tools/list sends title and annotations only when they are set	test tools list title annotations.vi	✅ pass	tools/list fake_tool_annotated (registered with a title) -> title "Annotated Fixture Tool": pass tools/list fake_tool_add (registered without title and annotations) -> neither title nor annotations: pass fake_tool_annotated (readOnlyHint true, destructiveHint false, the others not set) -> annotations with exactly readOnlyHint true and destructiveHint false: pass
Test 53: modern results carry resultType, cache hints and serverInfo; legacy results do not	test modern tools list.vi	✅ pass	modern tools/list -> _meta io.modelcontextprotocol/serverInfo with name and version: pass legacy tools/list (id 531, no _meta) -> tools without resultType, ttlMs, cacheScope or _meta: pass modern tools/list (id 53, MCP 2026-07-28 headers and _meta) -> 200 with tools, resultType complete, ttlMs 60000 and cacheScope public: pass
Test 54: server/discover, and initialize never negotiates 2026-07-28	test server discover.vi	✅ pass	initialize asking for 2025-11-25 (id 542) -> 2025-11-25: pass server/discover (id 54) -> 200, resultType complete, supportedVersions with 2026-07-28 and 2025-11-25: pass server/discover -> capabilities tools, prompts and resources (as initialize), _meta serverInfo, ttlMs 60000, cacheScope public: pass initialize asking for 2026-07-28 (id 541) -> the newest legacy version 2025-11-25, never 2026-07-28: pass
Test 55: modern requests are refused when their headers do not match the body	test modern headers.vi	✅ pass	tools/call with an Mcp-Name that is not params.name (id 554) -> 400 with error -32020: pass tools/call without an Mcp-Name header (id 551) -> 400 with error -32020: pass tools/call with Mcp-Name =?base64?...?= of fake_tool_add, lower-case header names (id 552) -> 200 with the tool result: pass MCP-Protocol-Version 2025-11-25 while _meta says 2026-07-28 (id 553) -> 400 with error -32020: pass Mcp-Method prompts/list on a tools/list request (id 55) -> 400 with error -32020: pass
Test 56: unsupported versions, missing capabilities and unknown methods in the modern era	test modern errors.vi	✅ pass	modern request without io.modelcontextprotocol/clientCapabilities (id 562) -> 400 with error -32602: pass modern request with the legacy version 2025-11-25 in _meta (id 561) -> 400, error -32022, data.supported with 2025-11-25: pass unknown version 2027-01-01 in header and _meta (id 56) -> 400, error -32022, data.supported with 2026-07-28, data.requested 2027-01-01: pass modern ping (id 564), which MCP 2026-07-28 removed -> 404 with error -32601: pass modern request with the unknown method foo/bar (id 563) -> 404 with error -32601: pass modern resources/read of an unknown uri (id 565) -> error -32602 (legacy keeps -32002): pass
Test 57: elicitation by input_required and retry with inputResponses	test elicitation.vi	✅ pass	legacy tools/call (id 574) -> outcome not supported: pass modern tools/call of fake_tool_confirm with the elicitation capability (id 57) -> resultType input_required with inputRequests.confirm_action: pass retry with inputResponses confirm_action accept (id 571) -> complete result with outcome confirmed: pass modern tools/call without the elicitation capability (id 573) -> outcome not supported, no input_required: pass retry with inputResponses confirm_action decline (id 572) -> outcome declined: pass
Test 58: progress notifications as Server-Sent Events for tools/call	test progress notifications.vi	✅ pass	modern tools/call with the numeric progressToken 583 (id 583) -> text/event-stream, 10 events with "progressToken":583 in order, then the complete result: pass the same call without progressToken (id 582) -> plain application/json, no progress events: pass the tool finished all 10 steps (fixture record): pass id 581: exactly 10 notifications/progress events, each with progressToken "t58" and total 10, progress 1..10 in increasing order: pass id 581: the JSON-RPC result is the last data event, after progress 10: pass legacy tools/call with progressToken "t58" and Accept text/event-stream (id 581) -> HTTP 200, text/event-stream: pass
Test 59: closing the stream cancels a streamed tools/call	test progress cancel by close.vi	✅ pass	modern streamed tools/call over raw TCP (id 591) -> text/event-stream, the first progress event arrives: pass after the client closed the connection the tool stopped early (fewer than 10 steps) and saw cancelled? TRUE: pass
Test 60: legacy notifications/cancelled stops a streamed tools/call	test progress legacy cancel.vi	✅ pass	legacy streamed tools/call over raw TCP (id 601) -> text/event-stream, the first progress event arrives: pass the tool stopped early (fewer than 10 steps) and saw cancelled? TRUE: pass notifications/cancelled for id 601 on a second connection -> HTTP 202 within 1 s, while the call runs: pass the stream ended without a result for id 601: pass
Test 61: a client that is not in Allowed clients gets 403	test access allowed clients.vi	✅ pass	tools/list from this computer to a server that allows only 192.0.2.1 -> HTTP 403, application/json: pass the 403 body is the JSON-RPC error -32600 "Forbidden: client not allowed." with id null: pass the second server (port 37061, Allowed clients = [192.0.2.1]) started: pass
Test 62: Access token requires Authorization: Bearer	test access bearer token.vi	✅ pass	the token never appears in a response: pass Authorization: bearer test-token-62 (lower-case scheme) -> HTTP 200 with the tools/list result, no WWW-Authenticate: pass authorization: Bearer test-token-62 (lower-case header name) -> HTTP 200 with the tools/list result: pass the 401 body is the JSON-RPC error -32600 "Unauthorized: missing or invalid bearer token." with id null: pass Authorization: Bearer wrong-token -> HTTP 401 with WWW-Authenticate: Bearer: pass no Authorization header -> HTTP 401 with WWW-Authenticate: Bearer (header names compared case-insensitively): pass the second server (port 37062, Access token set) started: pass
Test 63: tools/list leaves out LabVIEW's default error cluster descriptions	test tools list error descriptions.vi	✅ pass	fake_tool_error_descriptions: pass tools/list fake_tool_error_descriptions -> error in (no error) and error out are in inputSchema and outputSchema without a description key, and so are their status, code and source; their type is still there: pass

Protocol tests

✅ Test-McpServer.ps1 passed against the test server.

Protocol tester output (0 failed required checks)

Testing MCP server at http://127.0.0.1:36987/mcp/server

[PASS] (required) Lifecycle - initialize answers 200 with a JSON result
[PASS] (required) Lifecycle - initialize answer is JSON-RPC 2.0 with the request id
[PASS] (required) Lifecycle - initialize result has protocolVersion, capabilities and serverInfo.name
[PASS] (required) Lifecycle - Content-Type of the answer is application/json
[PASS] (advisory) Lifecycle - a client asking for 2024-11-05 gets that version back
[PASS] (required) Lifecycle - notifications/initialized is accepted with 202 and no body
[PASS] (required) Transport - GET answers 405 or opens an event stream
[PASS] (advisory) Transport - 405 answer names the allowed method in an Allow header
[PASS] (required) Transport - a request from a foreign Origin is rejected (403)
[PASS] (required) Transport - a request from a localhost Origin is accepted
[PASS] (required) Transport - an unsupported MCP-Protocol-Version header is rejected (400)
[PASS] (required) Transport - the negotiated MCP-Protocol-Version header is accepted
[PASS] (required) JSON-RPC - ping is answered with an empty result
[PASS] (required) JSON-RPC - an unknown method gets error -32601 with the request id
[PASS] (required) JSON-RPC - an unknown notification is not answered
[PASS] (required) JSON-RPC - a string request id is returned unchanged
[PASS] (required) JSON-RPC - malformed JSON gets error -32700
[PASS] (advisory) JSON-RPC - a request without a method gets error -32600
[PASS] (required) Tools - tools/list returns a tools array
[PASS] (required) Tools - every tool has a name and an inputSchema of type object (1 tools)
[PASS] (advisory) Tools - array parameters say what their items are
[PASS] (required) Tools - calling an unknown tool is answered with an error
[PASS] (required) Prompts - prompts/list returns a prompts array
[PASS] (required) Prompts - every prompt has a name (1 prompts)
[PASS] (required) Prompts - getting an unknown prompt is answered with an error
[PASS] (required) Resources - resources/list returns a resources array
[PASS] (required) Resources - every resource has a uri and a name (2 resources)
[PASS] (required) Resources - reading an unknown resource is answered with an error
[PASS] (advisory) Resources - resources/templates/list returns a resourceTemplates array

Required: 24 of 24 passed. Advisory: 0 failed.

VI diff report

No VI, VIM or CTL files changed in this pull request.

Report for commit 6c66954. The installable test package is under Artifacts of this run once the build job has finished.