·
1 commit
to main
since this release
Immutable
release. Only release title and notes can be modified.
Highlights
- Smarter OAuth challenges: per-call scope checks request only the permissions each tool invocation needs with runtime checks where required.
- Improved browser OAuth support: CORS now works across OAuth discovery routes, with configurable authorization-server URLs.
- Improved sub-issue workflow: create parent and sub-issues atomically.
- Better HTTP caching for STDIO: REST responses support ETag conditional requests.
- Runtime refresh: upgraded to Go 1.27authorizationauthorization plus routine security and dependency updates.
What's Changed
- feat(http): add --authorization-server flag to override OAuth AS URL by @Anika-Sol in #2900
- Name the root command after the installed binary by @plusky in #2998
- fix(http): preserve CORS across OAuth routes by @SamMorrowDrums in #3147
- Add atomic parent issue creation by @zwick in #3134
- Add ETag conditional requests to the REST transport by @joshfree in #3026
- build(deps): bump github/codeql-action from 4 to 4.37.4 by @dependabot[bot] in #3004
- Add per-call OAuth scope checks by @SamMorrowDrums in #3128
- build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #3157
- build(deps): bump github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2 by @dependabot[bot] in #3156
- build(deps): bump distroless/base-debian12 from
76b3162tofabbf1cby @dependabot[bot] in #3154 - build(deps): bump golang from 1.25.13-alpine to 1.27.0-alpine by @dependabot[bot] in #3153
- build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #3155
New Contributors
- @Anika-Sol made their first contribution in #2900
- @plusky made their first contribution in #2998
- @joshfree made their first contribution in #3026
Full Changelog: v1.10.1...v1.11.0
Contributors
joshfree, Anika-Sol, and 4 other contributors