Skip to content

0.6.0

Choose a tag to compare

View all tags
@calebl calebl released this 21 Oct 14:14
0.6.0
ea7cdf9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • The Cloudflare Worker's MCP SDK (@modelcontextprotocol/server) is updated from 2.0.0 to 2.3.1 for GHSA-jm63-cq47-j5jp, GHSA-46jr-4wx8-v453 and GHSA-rvq5-wwqv-78pq. The Worker now limits MCP request bodies to 1 MiB and tool inputs to 10,000 elements. The Worker was not exposed to the cross-client message or bearer-token issues. The npm package's stdio server does not use the affected package.

Highlights

  • ynab_get_transactions can search by date range, payee or memo text, amount range and direction, and can return totals (count, inflow, outflow, net) over every match, or only the totals.
  • ynab_bulk_approve_transactions can un-approve with approved: false.
  • Clearer tool descriptions to help pick the right tool.
  • The Worker logs failed GitHub sign-in token exchanges (never the code, state or secrets) and shows the sign-in failure page on malformed responses.

Deprecated

ynab_list_budgets, ynab_budget_summary, ynab_get_unapproved_transactions and ynab_approve_transaction are now deprecated aliases and will be removed in the release after 0.6.0. Use ynab_list_plans, ynab_plan_summary, ynab_get_transactions and ynab_bulk_approve_transactions. ynab_approve_transaction now returns the bulk response shape.

See the CHANGELOG for the full list.

Assets 2
Loading