v1.6.7

1.6.7 (2026-11-04)

Bug Fixes

• deps: ship @modelcontextprotocol/sdk 1.32.0 (#76) (e7c19d0), closes #74

v1.6.6

1.6.6 (2026-10-14)

Bug Fixes

• fail-closed S2S auth for HTTP MCP (CWE-306) (#77) (af9cada)

v1.6.5

1.6.5 (2026-08-25)

Bug Fixes

• migrate to WYRE-AI org (npm scope, ghcr namespace, registry) (#66) (121fa23)

v1.6.4

1.6.4 (2026-08-21)

Bug Fixes

• ci: restore qbo-mcp.mcpb as a release asset (#61) (246b209), closes #46 #45 #43 #40 #47

v1.6.3

1.6.3 (2026-08-18)

Bug Fixes

• re-read rotated credentials from QBO_CREDENTIALS_FILE on every request (#64) (40fcb57), closes #63

v1.6.2

1.6.2 (2026-08-13)

Bug Fixes

• security: enforce gateway S2S verification (gateway#377 parity) (#57) (44d0f75), closes 55/liongard-mcp#60

v1.6.1

1.6.1 (2026-08-07)

Bug Fixes

• ci: bump mcp-assert reusable-workflow pin to pick up the 403 fix (#58) (11e09c1), closes liongard-mcp#62

v1.6.0

1.6.0 (2026-07-17)

Features

• interactive invoice card via MCP Apps (SEP-1865) (#51) (3f84ae7)

v1.5.1

1.5.1 (2026-07-01)

Bug Fixes

• build a fresh Server + transport per HTTP request (stateless) (#48) (f559bfb), closes #47

v1.5.0

1.5.0 (2026-06-02)

Bug Fixes

• release: grant packages:write and NPM_TOKEN so first GitHub Packages publish succeeds (776fb78)

Features

• worker: serve full MCP on Cloudflare Workers via Web Standard transport (5dfb91d)