v0.10.0

Added

• tool: add sendEmail param to faxdrop_send_fax, default false (#200) (be0076f)

Fixed

• deps: clear all open Dependabot security alerts (#244) (2eaa88e)
• status: accept both "completed" (live) and "delivered" (doc) as terminal (#193) (4f45ec0)

Changed

• bump actions/attest from 4.1.0 to 4.1.1 (#225) (fb5829a)
• bump actions/attest-build-provenance from 4.1.0 to 4.1.1 (#221) (75755fe)
• bump actions/checkout from 6.0.2 to 7.0.0 (#201) (bd8597b)
• bump actions/create-github-app-token from 3.1.1 to 3.2.0 (#190) (d8d9a6b)
• bump docker/build-push-action from 7.1.0 to 7.3.0 (#197) (ab84b6c)
• bump docker/setup-buildx-action from 4.0.0 to 4.2.0 (#196) (a5b9069)
• bump github/codeql-action from 4.35.4 to 4.35.5 (#189) (b3e7d1b)
• bump github/codeql-action/analyze from 4.35.5 to 4.36.3 (#222) (e865263)
• bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0 (#220) (5a4ec06)
• bump pinned Node 22.x to 22.23.1 (#219) (1469fd1)
• bump reusable SHAs to current klodr/.github main (orphan fix) (#187) (cf8d4a0)
• bump suzuki-shunsuke/pinact-action from 2.0.0 to 3.0.0 (#195) (3fcf9c8)
• ci: reduce release-please trigger to 1 workflow_run (#185) (e673a52)
• deps-dev: bump the dev-dependencies group across 1 directory with 12 updates (#218) (0f36e56)
• deps-dev: bump the dev-dependencies group with 3 updates (#226) (12f1a7c)
• deps-dev: bump typescript-eslint from 8.59.3 to 8.59.4 in the dev-dependencies group (#191) (81ae274)
• deps: bump libphonenumber-js from 1.13.2 to 1.13.4 in the production-dependencies group across 1 directory (#199) (4736780)
• deps: bump libphonenumber-js from 1.13.4 to 1.13.8 in the production-dependencies group across 1 directory (#205) (9269122)
• deps: clear all OSV-Scanner vulnerabilities (#215) (f14b4d3)
• deps: relock to pull qs 6.15.2 fix for CVE-2026-8723 (#186) (b739b14)
• leak-detect: bump reusable to skip bot-authored PRs (#192) (9e2e915)
• leak-detect: bump to inline-JWT reusable + drop client-id (#188) (6c69388)
• lint: enable prevent-abbreviations with klodr/* allowList (#183) (99a681c)
• pinact ignores for internal reusables + checkout hardening (#217) (220a85d)
• release: drop setup-node registry-url for OIDC publish (#228) (95f5301)
• release: publish to npm via OIDC trusted publishing (#227) (433c403)
• release: run publish on Node 24 (bundled npm 11.16, OIDC-ready) (#229) (2e29c81)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.10.0/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.10.0

v0.9.1

Fixed

• ci: add top-level permissions: contents: read to auto-merge (#180) (193591a)

Changed

• lint: adopt eslint-plugin-unicorn (pass 1) (#182) (ac93b46)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.9.1/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.9.1

v0.9.0

Added

• tools: declare openWorldHint:true on every tool (#178) (ade1302)

Fixed

• verify-release: pin cosign predicate to SLSA Provenance v1 (#177) (fbc958f)

Changed

• lint: reactivate 6 markdownlint rules previously disabled (#176) (8a80c3c)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.9.0/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.9.0

v0.8.8

Fixed

• pre-commit: call ./node_modules/.bin/lint-staged directly (#168) (470d528)

Changed

• add leak-detect caller workflow (#170) (4939f3b)
• bump actions/checkout from 4.2.2 to 6.0.2 (#164) (d737937)
• ci: migrate leak-detect to GitHub App credentials (#171) (9415453)
• deps: bump libphonenumber-js from 1.13.0 to 1.13.1 in the production-dependencies group (#166) (5253647)
• fix four workflow errors (pinact, gitleaks, auto-merge, coderabbit) (#175) (e8342fc)
• leak-detect: re-pin reusable workflow to fix yq checksum SHA (#174) (a0059be)
• node: align .npmrc rationale + bump .nvmrc to 22.22.2 (CVE floor) (#167) (7750046)
• pre-commit: warn on missing system tooling (yamllint) (#162) (c5876b7)
• pre-push: sync with canonical template (SC2034 + drop npm audit) (#163) (ede1572)
• scripts: canonicalise sync-version with ecosystem (#173) (e06d303)
• test: harmonise vitest coverage config with klodr/* ecosystem (#172) (93c305b)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.8.8/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.8.8

v0.8.7

Fixed

• ci: align auto-merge filter on klodr-release-please[bot] (#157) (0f20737)
• ci: drop paths filter on actions-pinned (#156) (37511b3)
• ci: repin reusable auto-merge to a reachable SHA (#158) (0d97f72)

Changed

• lint-staged: add prettier --write to all globs (#160) (961bec0)
• migrate ci.yml to reusable-node-ci (#159) (4201f1b)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.8.7/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.8.7

v0.8.6

Fixed

• ci: gate auto-merge caller on bot login before passing secrets (#148) (64ff952)
• ci: re-arm release-please auto-merge on synchronize (#140) (510ca42)
• lint: drain CR findings + valid globs syntax (#153) (cb2c73a)
• scope release-please app token to least-privilege (#139) (9dc0761)

Changed

• add auto-merge caller for release-please PRs (#138) (a6f6078)
• add pinact config + actions-pinned CI gate (#151) (786c465)
• add yamllint+markdownlint+commitlint+lint-staged pack (#149) (54e40f2)
• bump github-script v9 + migrate to client-id (#137) (4d28206)
• bump github/codeql-action from 4.35.3 to 4.35.4 (#144) (a82e4d5)
• bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#143) (adfc22f)
• bundle-analysis: run on Dependabot PRs to satisfy required check (#147) (f0ffcdf)
• dependabot: use chore(deps) prefix for Conventional Commits (#141) (10eb568)
• deps-dev: bump @types/node 22.19.17→22.19.18 (#145) (ad566e8)
• deps: bump actions/github-script SHA (#142) (e38bb75)
• deps: bump libphonenumber-js from 1.12.42 to 1.13.0 in the production-dependencies group across 1 directory (#146) (7c4212f)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.8.6/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.8.6

v0.8.5

Changed

• add CR title baseline (Conventional Commits + 72c cap) (#134) (77882ee)
• add eslint-plugin-jsonc for JSON file linting (#135) (e0d1e9c)
• codecov: upload v8 JSON alongside lcov for branch detail (#131) (6f77764)
• factor ci.yml via klodr/.github composite actions (#133) (4905aca)

Documentation

• add AGENTS.md + CLAUDE.md + copilot-instructions stubs (#132) (44c95ce)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.8.5/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.8.5

v0.8.4

Changed

• codecov: silence GPG trust + multi-language search warnings (#128) (fb165a1)
• harmonize cross-repo (typecheck pre-push + fail_ci_if_error) (#129) (8294275)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.8.4/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.8.4

v0.8.3

Changed

• release-please: chain on workflow_run instead of racing CI (#124) (d7e6d2d)
• release: re-publish 0.8.3 after husky strip-prepare fix (#126) (26721b6)
• release: strip prepare + prepublishOnly before npm publish (#125) (38286f6)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.8.3/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.8.3

v0.8.2

Changed

• release-please: expose chore + ci in CHANGELOG sections (#122) (413030f)

Full changelog: https://github.com/klodr/faxdrop-mcp/blob/v0.8.2/CHANGELOG.md
npm: https://www.npmjs.com/package/faxdrop-mcp/v/0.8.2