We just tagged v9.5.1 — a tightly focused maintenance release that rolls up dependency updates, patches a vulnerable Composer package, and extends the CI test matrix with Mage-OS 2.3.0 and Mage-OS 3.0.0 support. No new features, no surprises — exactly what you want from a patch release.

---

Mage-OS 2.3.0 and 3.0.0 in the CI Matrix

The most noteworthy change for the broader community: n98-magerun2 now runs its full integration test suite against Mage-OS 2.3.0 and the freshly released Mage-OS 3.0.0. This means you can use n98-magerun2 on both versions with confidence — any incompatibility will be caught early in our pipeline going forward.

One small adjustment accompanies this: Varnish VCL generation tests are now skipped on Mage-OS installations, where the relevant VCL tooling isn’t available.

---

Security: Vulnerable Composer Packages Updated

PR #2016 updates vulnerable Composer dependencies. If you’re running n98-magerun2 in environments where dependency security matters — and it should — this alone is a good reason to update promptly.

---

MCP SDK Bump: 0.4.0 → 0.5.0

The mcp/sdk package moves from 0.4.0 to 0.5.0. If you’re using the MCP server integration introduced in v9.3.0, this brings the SDK in line with the latest protocol changes.

---

Dependency Updates

A clean round of bumps across the board:

• phpstan/phpstan: 2.1.51 → 2.1.55 (two steps)
• rmccue/requests: 2.0.17 → 2.0.18
• mcp/sdk: 0.4.0 → 0.5.0
• friendsofphp/php-cs-fixer: 3.95.1 → 3.95.2
• actions/github-script: v8 → v9
• sigstore/cosign-installer: 4.1.1 → 4.1.2
• npm_and_yarn (docs): lodash-es 4.17.23 → 4.18.1 + 6 further updates

---

Full Changelog

Build

• build(deps-dev): bump phpstan/phpstan from 2.1.51 to 2.1.54 (#2009)
• build(deps-dev): bump phpstan/phpstan from 2.1.54 to 2.1.55 (#2013)
• build(deps): bump rmccue/requests from 2.0.17 to 2.0.18 (#2008)
• build(deps): bump mcp/sdk from 0.4.0 to 0.5.0 (#2006)
• build(deps): bump actions/github-script from 8 to 9 (#1994)
• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#2010)
• build(deps-dev): bump friendsofphp/php-cs-fixer from 3.95.1 to 3.95.2 (#2012)
• build(deps): bump lodash-es from 4.17.23 to 4.18.1 in /docs (#1993)
• build(deps): bump the npm_and_yarn group across 1 directory with 7 updates (#2018)
• build(deps): update vulnerable composer packages (#2016)

CI / Chore

• chore(ci): add mage-os 2.3.0 to platform test matrix (#2017)
• chore(ci): add mage-os 3.0.0 to platform test matrix (#2019)

Test

• test(bats): skip varnish vcl generation on mage-os (#2020)

---

How to Update

As always, the easiest way to update is via the built-in self-update command:

./n98-magerun2.phar self-update