Skip to content

v2.4.0: Richer issue history and a live demo

Choose a tag to compare

View all tags
@jztan jztan released this 27 Jun 02:28
v2.4.0
d7e0331

Highlights

get_redmine_issue now returns full field-change history, not just notes. Status changes, reassignments, and custom-field edits come through as structured details (property, name, old value, new value), and journals that only record field changes are no longer dropped. If you rely on issue history for triage or audit, you will see edits that earlier versions silently lost.

A new promotional demo page, published to GitHub Pages on each release, walks through an AI agent triaging a sample sprint backlog: listing, reading, reassigning, commenting, logging time, and closing issues. It shows real-shaped tool-call JSON and a Kanban board that updates as the agent works, with a light/dark toggle and no live Redmine required.

This release also closes CVE-2026-48990 by raising the joserfc floor, and extends prompt-injection protection to the newly surfaced field-change values.

Changes

Added

  • Scripted client-side demo page deployed to GitHub Pages on version tags, with tool-call JSON, a live-updating Kanban board, and a light/dark theme toggle.

Fixed

  • get_redmine_issue now returns journal field-change details (status, assignee, custom-field edits) and keeps journals that have no note text, so field-only history is no longer lost. Each entry includes details and private_notes. (#161)

Security

  • Added a direct joserfc>=1.6.7,<2 floor to clear CVE-2026-48990 (CWE-400 uncontrolled resource consumption), where versions 1.3.4 through 1.6.5 fail to apply the max payload length to RFC 7797 unencoded (b64=false) JWS payloads; fixed in 1.6.6, lock now resolves to 1.7.1.
  • Free-form journal field-change values (custom fields, description/subject edits, attachment filenames) now get the same prompt-injection wrapping as notes, while structured values like status, assignee, priority IDs, dates, and numbers stay raw. (#161)

Acknowledgements

Thanks to @martindglaser for contributing:

  • fix missing journal field-change details in get_redmine_issue (#163)

Installation

pip install redmine-mcp-server==2.4.0

Links

Contributors

martindglaser
Assets 2
Loading