0.7.0

Security

• The locked hono is updated from 4.13.8 to 4.13.13 for GHSA-5r4p-p66f-jhc7, and vite from 7.3.6 to 7.3.7 for GHSA-698v-4r3x-3vcv, GHSA-587h-7wmj-h5pm and GHSA-r825-w8mm-5pxw. Neither server was exposed: hono is only a transitive dependency and nothing imports serveStatic, and vite is a development-only dependency. The Worker bundle is unchanged.

Highlights

• ynab_balance_forecast projects your accounts' combined balance over the coming days from scheduled transactions, with the running balance, lowest point and ending balance.
• ynab_detect_recurring finds recurring charges (subscriptions, bills, memberships) in transaction history, with cadence, typical amount, annual cost and next expected date.
• ynab_plan_summary can add a budget-vs-actuals comparison for the month with budgetVsActuals: true.
• ynab_spending_by_category and ynab_spending_by_payee can break spending down by month with monthly: true.
• A plan's currency settings are cached, saving one API request per tool call after the first.

Removed

The deprecated tool aliases are gone, as announced in 0.6.0: ynab_list_budgets (use ynab_list_plans), ynab_budget_summary (use ynab_plan_summary), ynab_get_unapproved_transactions (use ynab_get_transactions with type: "unapproved"; it returns up to 100 rows by default and accepts limit up to 1000, so check total_available) and ynab_approve_transaction (use ynab_bulk_approve_transactions). The budgetId parameter and YNAB_BUDGET_ID are still accepted.

See the CHANGELOG for the full list.