v1.0.0

What's Changed

• Serve .well-known discovery documents when the path has a trailing slash by @tomjn in #7
• Consolidate open Dependabot bumps and group future updates by @roborourke in #9
• Cap rest-api/call responses and pass _fields through by @roborourke in #19
• Add a media/upload ability for file uploads by @roborourke in #20
• Pin the Playground site name and add an application password by @roborourke in #21
• Expose both abilities as first-class MCP tools by @roborourke in #23
• Add an MCP client and protocol tests by @roborourke in #24
• Add CRUD, media and permission tests over MCP by @roborourke in #25
• Bump actions/checkout from 4 to 7 in the github-actions group by @dependabot[bot] in #10
• Bump @playwright/test from 1.62.1 to 1.63.0 in the npm-dependencies group by @dependabot[bot] in #11
• Deny permission for unmatched routes by @roborourke in #34
• Filterable policy layer, permissive by default by @roborourke in #35
• Split rest-api/call into read, write, and delete tools by @roborourke in #36
• Route risk classification and confirmation guidance by @roborourke in #37
• Fix stale rest-api-call references left after the tool split by @roborourke in #40
• Add guidance for a route's publishable status field by @roborourke in #41
• Add block-content guidance and an opt-in wesper/block-runner skill by @roborourke in #44
• Bump the npm-dependencies group with 2 updates by @dependabot[bot] in #43
• Remove OAuth2 well-known discovery endpoints by @roborourke in #42
• Roll the changelog over into versioned release sections by @roborourke in #45
• Name close matches for unknown routes and keep discovery under the cap by @roborourke in #48
• Add a REST endpoint that finds the post at a URL by @roborourke in #47
• Roll the changelog over for 0.6.0 by @roborourke in #49
• Require PHP 8.2 by @roborourke in #52
• Bump the npm-dependencies group across 1 directory with 2 updates by @dependabot[bot] in #50
• Confirm deletes and risky writes through MCP elicitation by @roborourke in #51
• Roll the changelog over for 1.0.0 by @roborourke in #53

New Contributors

• @tomjn made their first contribution in #7
• @roborourke made their first contribution in #9
• @dependabot[bot] made their first contribution in #10

Full Changelog: https://github.com/humanmade/hm-rest-ability/commits/v1.0.0