Skip to content

v2.0.0

Choose a tag to compare

@sylvesterdamgaard sylvesterdamgaard released this 18 Mar 09:54
7497d25

v2.0.0 — Storage drivers, OAuth 2.1, audit overhaul, security hardening

Major release: storage driver abstraction, MCP OAuth 2.1 with PKCE, comprehensive audit logging, router-based tool architecture, and security hardening.

Breaking Changes

  • Statamic v5 dropped — requires Statamic v6.6+, Laravel 12/13, PHP 8.3+
  • Laravel MCP v0.6 — new tool attribute pattern
  • Router architecture — 140+ tools consolidated into 11 domain routers
  • Tool names changedstatamic.blueprints.liststatamic-blueprints with action: list
  • Config restructured — re-publish required

Highlights

  • Storage drivers: File (YAML/JSONL, default) and Database (Eloquent)
  • OAuth 2.1: PKCE S256, Dynamic Client Registration, refresh token rotation, revocation
  • 21 scoped API tokens with fine-grained access control
  • CP Dashboard: User + Admin pages with token management and audit log
  • Security: 8 review rounds, 30+ findings fixed
  • Laravel 13 support
  • 772 tests, PHPStan Level 8, full CI matrix

Upgrade Guide

See UPGRADE.md for migration steps from v1.x.

Full Changelog

See CHANGELOG.md for complete details.