Repository navigation
Reissued the MCP Description validator integration from 2.0.3 & 2.0.4 as a fix-forward release after that version failed during npm publication, switched the npm publish workflow from the obsolete NPM_TOKEN path to npm Trusted Publishing with GitHub Actions OIDC.
Updated to @mcpdesc/validator 0.13.0 and adopted its maintained default
selector for MCP Description 0.8.0 validation. Explicit immutable selector
pins remain only where exact-contract operations require them.
MCP Description 0.8.0 validation now accepts documents without $schema,
while continuing to reject unknown schema identities and unsupported format
versions.
Legacy MCP contract dumps now preserve unknown and custom JSON Schema
keywords, including x-mcp-header, without treating their inactive modern
MCP semantics as invalid. MCP-specific x-mcp-header validation still
applies to protocol version 2026-07-28.
Security fixes: dependabot critical, high and moderate