0.8.0

Added

• The Worker can sign MCP clients in through Cloudflare Access in place of GitHub. With CF_ACCESS_TEAM_DOMAIN, CF_ACCESS_AUD and CF_ACCESS_ALLOWED_EMAIL set, it serves only /mcp, and only to a request whose Cf-Access-Jwt-Assertion token is signed by the team, issued for the application, unexpired and for that email. Any other identity gets a 403, including service tokens. A partial Access configuration, or ALLOWED_REDIRECT_URIS set alongside it, answers every request with a 500 rather than falling back to GitHub sign-in. See DEPLOY.md.

Changed

• GitHub sign-in answers with a 500 naming a missing GITHUB_CLIENT_ID, GITHUB_CLIENT_SECRET or ALLOWED_GITHUB_LOGIN, instead of failing partway through sign-in.

Security

• undici is updated from 7.29.1 to 7.30.1 for GHSA-xjj6-f33q-929c. Neither server was exposed: undici is a development-only dependency of the local Worker tooling.
• body-parser is updated from 2.3.0 to 2.4.0 for GHSA-27r3-jxmh-p828. Neither server was exposed: neither loads body-parser.
• @hono/node-server is updated from 2.1.1 to 2.1.5 for GHSA-rmxm-3fg6-px4f. Neither server was exposed: neither loads @hono/node-server.

See the CHANGELOG for details.