Skip to content

baukit 0.11.1

Choose a tag to compare

@github-actions github-actions released this 24 Oct 05:14
· 10 commits to main since this release

baukit v0.11.1

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

  • Clarify that Principal::from_api_token requires a token verified against the
    current store on every request. API-token grants stay separate from OIDC scopes;
    MCP uses the grants as its effective scopes.

baukit-config

  • No component-specific changes in this train.

baukit-core

  • No component-specific changes in this train.

baukit-credential-vault

  • No component-specific changes in this train.

baukit-data-subject

  • No component-specific changes in this train.

baukit-egress

  • No component-specific changes in this train.

baukit-erasure

  • No component-specific changes in this train.

baukit-events

  • No component-specific changes in this train.

baukit-http

  • No component-specific changes in this train.

baukit-integrations

  • No component-specific changes in this train.

baukit-jobs

  • No component-specific changes in this train.

baukit-mcp

  • Seed effective MCP scopes from verified API-token grants. Policies can only narrow
    them; OIDC scopes and baukit-auth::Principal::scopes() keep their existing behavior.
  • Behavior change: a product that already routes API tokens to /mcp grants each token the MCP
    tools its stored grants match after upgrading. Before, every such token had no scopes. Check
    that issued grants use MCP scope names only where tool access is intended.
  • Reject API-token principals in Keycloak introspection without forwarding their secrets.
    Document PAT verifier wiring, subject mapping and per-request revocation checks.

baukit-openapi

  • No component-specific changes in this train.

baukit-ops

  • No component-specific changes in this train.

baukit-push

  • No component-specific changes in this train.

baukit-ratelimit

  • No component-specific changes in this train.

baukit-runtime

  • No component-specific changes in this train.

baukit-suite

  • No component-specific changes in this train.

baukit-sync

  • No component-specific changes in this train.

baukit-telemetry

  • No component-specific changes in this train.

baukit-test

  • No component-specific changes in this train.

TypeScript packages

a11y-core

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

analytics-core

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

analytics-posthog-native

Patch Changes

  • Release the coordinated baukit 0.11.1 train.
  • Updated dependencies
    • @baukit/analytics-core@0.11.1

analytics-posthog-web

Patch Changes

  • Release the coordinated baukit 0.11.1 train.
  • Updated dependencies
    • @baukit/analytics-core@0.11.1

api-runtime

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

auth-native

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

auth-node

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

auth-web

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

data-contracts-dexie

Patch Changes

  • Release the coordinated baukit 0.11.1 train.
  • Updated dependencies
    • @baukit/data-contracts@0.11.1

data-contracts-expo-sqlite

Patch Changes

  • Release the coordinated baukit 0.11.1 train.
  • Updated dependencies
    • @baukit/data-contracts@0.11.1

data-contracts

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

events

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

integrations-client

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

localization-core

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

navigation

Patch Changes

  • Release the coordinated baukit 0.11.1 train.
  • Updated dependencies
    • @baukit/a11y-core@0.11.1
    • @baukit/ui-tokens@0.11.1

notifications-core

Patch Changes

  • Release the coordinated baukit 0.11.1 train.
  • Updated dependencies
    • @baukit/localization-core@0.11.1

notifications-expo

Patch Changes

  • Release the coordinated baukit 0.11.1 train.
  • Updated dependencies
    • @baukit/notifications-core@0.11.1

preferences-core

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

pwa-web

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

suite-client

Patch Changes

  • Release the coordinated baukit 0.11.1 train.
  • Updated dependencies
    • @baukit/integrations-client@0.11.1
    • @baukit/localization-core@0.11.1

sync-client

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

ui-tokens

Patch Changes

  • Release the coordinated baukit 0.11.1 train.

Commits

  • chore: prepare baukit v0.11.1 (b4e0cdbf)
  • Merge mcp-api-token-scopes: API-token grants as effective MCP scopes (940c23ce)
  • chore(deps): update tokio to 1.53.3 and ctutils to 0.4.5 (44a2f0cb)
  • test(mcp): cover API tokens after the v0.11 rebase (79899cd1)
  • docs(mcp): flag API-token scope seeding as a behavior change (f7f412ab)
  • fix(mcp): use verified API-token grants as effective scopes (7574a189)