v2.0.0

Breaking Changes

• Existing live mutation and workflow execution tool calls now require confirm: true.
• Affected tools include workflow creation/execution, action creation, configuration creation/update, deployment creation, template creation, subscription creation/update, and other live import/delete operations that mutate VCFA/vRO state.
• Calls without confirm: true now return a confirmation message instead of changing live state.

Added

• Automatic VCFA bearer-token refresh on 401/403 responses.
• Redaction and truncation for surfaced VCFA/vRO error response bodies.
• Package validation coverage for published LICENSE and NOTICE files.

Changed

• Adopted Apache License 2.0 with NOTICE attribution and clarified official package/repository branding.
• Changed local artifact export/snapshot/scaffold tools to advertise write-capable MCP annotations.
• Synced advertised MCP server version with package version.
• Updated Dependabot checks to monthly and refreshed dependencies.

Fixed

• Fixed action lookup fallback behavior for non-404 API failures.
• Fixed duplicate vRA8 compatibility guard calls in artifact import/export paths.
• Fixed OData filter escaping in subscription lookups.