v0.3.1

v0.3.1 (2026-08-31)

---

Detailed Changes: v0.3.1-beta.1...v0.3.1

v0.3.1-beta.1

v0.3.1-beta.1 (2026-08-31)

Bug Fixes

• Avoid spread overflow in MIME chunking (f2f2fc6)

• Improve OAuth callback icon accessibility (e6897d9)

• deps: Bump mcp-core to 1.23.1 (abdc952)

• deps: Update oven/bun:1-alpine Docker digest to 0723557 (#140, 32960e7)

• deps: Update python-semantic-release/publish-action action to v10.6.2 (#141, b571660)

• ux: Improve color contrast for status icons in oauth callback (#139, 0e6279c)

---

Detailed Changes: v0.3.0...v0.3.1-beta.1

v0.3.0

v0.3.0 (2026-08-29)

Bug Fixes

• Keep registry description within limit (3e068d7)

• deps: Update GitHub Artifact Actions (#99, 4e27613)

• deps: Update google-auth-library to v11 (#103, 27cd13f)

• deps: Update step-security/harden-runner action to v2.21.0 (#98, ae9e60e)

Chores

• Add README registry bootstrap checks (bee898a)

• Bump better-semantic-release to v1.4.0 (#123, 5ae1c79)

Features

• Add hosted runtime tombstone (#120, f61d72e)

---

Detailed Changes: v0.2.0...v0.3.0

v0.2.0

v0.2.0 (2026-08-15)

Bug Fixes

• Keep semantic main landmark in OAuth callback (6c065c7)

Features

• Use Promise.all for fallback sheet reads (277a664)

---

Detailed Changes: v0.2.0-beta.1...v0.2.0

v0.2.0-beta.1

v0.2.0-beta.1 (2026-08-14)

Bug Fixes

• Add ARIA roles to OAuth callback (ed3c52d)

• Add HSTS to OAuth callback (05b64b8)

• Honor CSP in OAuth callback visuals (#84, e5376f7)

• Update Codecov action to v7 (26ad6cb)

• Update send-mail action to v18 (922d47a)

• deps: Update Node.js to v24.19.0 (#85, b6ddbd2)

• deps: Update python to v3.14.7 (#86, 15c86ef)

Features

• Improve OAuth callback visual feedback (#84, e5376f7)

---

Detailed Changes: v0.1.2...v0.2.0-beta.1

v0.1.2

v0.1.2 (2026-08-12)

Bug Fixes

• Harden OAuth callback response (e144cdd)

---

Detailed Changes: v0.1.1...v0.1.2

v0.1.1

v0.1.1 (2026-08-11)

Bug Fixes

• Keep MCP Registry description within limit (3aad2f0)

---

Detailed Changes: v0.1.0...v0.1.1

v0.1.0

v0.1.0 (2026-08-11)

---

Detailed Changes: v0.1.0-beta.3...v0.1.0

v0.1.0-beta.3

v0.1.0-beta.3 (2026-08-11)

Bug Fixes

• Align MCP SDK with mcp-core 1.23.0 (#78, 3c6a276)

• Enforce two-token tool names (#77, 7b709a1)

• Isolate Drive filesystem writes to local transport (#77, 7b709a1)

• Replace dead docs host in README, add install steps and table of contents (6150fb8)

• Send no-referrer policy on the OAuth callback page (#77, 7b709a1)

• Set security headers on OAuth callback responses (#77, 7b709a1)

• Stack khong con MIT nen bo cau doi lap trong ghi chu license (#49, 88912ac)

• Validate Drive URL hostnames (4480922)

• deps: Update n24q02m/better-semantic-release action to v1.3.0 (#74, 9d3b6cb)

• deps: Update step-security/harden-runner action to v2.20.1 (#72, 6372c2c)

Features

• Add bot governance workflow (#77, 7b709a1)

• Align tool names with the naming standard (#77, 7b709a1)

• Execute workspace backlog governance and hardening (#77, 7b709a1)

• Http-mode docs, compose overlay, and a scripted upstream sync (2a97556)

---

Detailed Changes: v0.1.0-beta.2...v0.1.0-beta.3

v0.1.0-beta.2

v0.1.0-beta.2 (2026-07-27)

Bug Fixes

• Call the release step bsr, which is what actually runs (3600ee5)

• Let the npm publish step survive a re-run, and refuse a README-less tarball (c199734)

• Let the release App and Renovate bypass the branch ruleset (9827dc0)

• deps: Update actions/checkout action to v7 (#31, ced9317)

• deps: Update actions/dependency-review-action action to v5 (#35, dddfd54)

Features

• Deploy the Cloudflare Worker+Container from CD, like the sibling servers (d7dbf43)

• Sync cross-promo section (#33, 5fb1e0a)

---

Detailed Changes: v0.1.0-beta.1...v0.1.0-beta.2