Skip to content

v3.1.6

v3.1.6 — bump @cyanheads/mcp-ts-core 0.8.18 → 0.8.20
@cyanheads cyanheads tagged this 09 May 10:59 
Picks up the framework-side fix for #47. Operators behind Authentik /
Keycloak <26.5 / Zitadel can inject per-tool scopes via the new
`mcp_tool_scopes` JWT claim, or set MCP_AUTH_DISABLE_SCOPE_CHECKS=true
and combine with OBSIDIAN_READ_PATHS / OBSIDIAN_WRITE_PATHS /
OBSIDIAN_READ_ONLY for access control. No source changes in this server.

- @cyanheads/mcp-ts-core ^0.8.18 → ^0.8.20:
  - 0.8.19: Bun ≥1.3.0 / Node ≥24.0.0 engines; oven/bun:1 → oven/bun:1.3
    Docker base; api-telemetry skill (v1.0); changelog `security: bool`.
  - 0.8.20: mcp_tool_scopes claim parsed alongside scp and scope (union);
    MCP_AUTH_DISABLE_SCOPE_CHECKS bypasses withRequiredScopes + checkScopes
    after the auth-context presence check; authFactory logs WARNING when
    bypass active under non-`none` mode. (cyanheads/mcp-ts-core#128)
- engines.node >=22.0.0 → >=24.0.0; Docker base oven/bun:1 → oven/bun:1.3.
- @types/node ^25.6.0 → ^25.6.2.
- README env-var table + .env.example document the claim union and
  bypass flag.
- Phase A skill bumps: api-telemetry (new, v1.0), api-auth 1.0 → 1.1,
  api-config 1.3 → 1.4, api-utils 2.1 → 2.2, maintenance 2.0 → 2.1,
  report-issue-framework 1.5 → 1.6, report-issue-local 1.4 → 1.5,
  security-pass 1.3 → 1.4, setup 1.6 → 1.7, tool-defs-analysis 1.0 → 1.1.
- Phase C reference-file sync: scripts/build-changelog.ts parses
  `security` frontmatter; changelog/template.md documents it.

See changelog/3.1.x/3.1.6.md for the full release notes.
Assets 2
Loading