Semantic Notes Vault MCP 0.12.4

Semantic Notes Vault MCP 0.12.4

Security prerelease for BRAT testing. (1) ADR-109 (#284): outbound web fetch now OFF by default for all installs — re-enable via Settings → Security → 'Allow outbound web fetch'; when enabled, internal addresses are blocked (canonicalization-aware), every redirect hop re-validated, and connections DNS-pinned. (2) Dependency security fixes: brace-expansion, fast-uri, hono, ip-address advisories resolved; npm audit now 0 across the full tree.

Claude Desktop (.mcpb connector)

If you connect Claude Desktop via the .mcpb bundle, re-import obsidian-mcp.mcpb from this release to update the connector — BRAT updates only the Obsidian plugin, not the Desktop bridge.

Installation via BRAT (Obsidian plugin)

1. Install the BRAT plugin if you haven't already
2. Command palette → "BRAT: Add a beta plugin for testing"
3. Enter: aaronsb/obsidian-mcp-plugin
4. Enable the plugin in Community Plugins

Full Changelog: 0.12.3...0.12.4