v2.6.4
This release is mostly behind-the-scenes plumbing — tightening up our publishing pipeline so updates ship reliably. The one change you might notice is improved security around the browser-automation tools, which now validate inputs more carefully and clean up properly when Claude disconnects.
Security
- The
ddb_navigateandddb_interacttools now validate page selectors before using them, reducing the risk of unexpected behavior if something tries to slip in malicious instructions through page content. - The browser session now closes cleanly when Claude disconnects, so stray Chrome windows don't linger after your session ends.
Improvements
- More reliable npm publishing: when a new version is released, the publish step now correctly waits for all CI checks (across multiple Node.js versions) to pass before going live.
- Updated minimum Node.js requirement to version 20. If you installed ddb-mcp recently you're already on a supported version; if you're on an older Node, you'll need to upgrade.
- README now includes a security and privacy section explaining how your D&D Beyond session is stored and used.