v0.6.1

v0.6.1 (2026-07-19)

This release is published under the MIT License.

Bug Fixes

• Duckdb の必要バージョンを 1.5.2 に修正 (5710410)

Refactoring

• core: 実在しない互換マニフェストの参照を削除 (dc9cef3)

---

Detailed Changes: v0.6.0...v0.6.1

v0.6.0

v0.6.0 (2026-07-19)

This release is published under the MIT License.

Documentation

• Mention queria login first in the README quickstart (cfb8dc9)

• Use absolute URLs for README language switch links (3cb748f)

Features

• Add browser-based login and logout commands (3fbedf0)

---

Detailed Changes: v0.5.1...v0.6.0

v0.5.1

v0.5.1 (2026-07-19)

This release is published under the MIT License.

Bug Fixes

• テレメトリ送信に User-Agent を設定 (Cloudflare のボット判定で 403 になるため) (fa0959c)

---

Detailed Changes: v0.5.0...v0.5.1

v0.5.0

v0.5.0 (2026-07-19)

This release is published under the MIT License.

Chores

• Sync queria version in uv.lock with released version (a503e20)

Continuous Integration

• Update uv.lock during semantic-release version bump (495d51d)

---

Detailed Changes: v0.4.0...v0.5.0

v0.4.0

v0.4.0 (2026-07-19)

This release is published under the MIT License.

Chores

• deps: Bump actions/checkout from 5 to 7 (7f5ed16)

• deps: Bump python-semantic-release/python-semantic-release (c64a36d)

Documentation

• Describe agent-readable docs endpoints in the READMEs (d27b82b)

• Translate README to English, keep Japanese as README.ja.md (5f0373b)

Features

• Link agent-readable docs from --help and MCP instructions (6561dcb)

---

Detailed Changes: v0.3.1...v0.4.0

v0.3.1

v0.3.1 (2026-07-18)

This release is published under the MIT License.

Bug Fixes

• mcp: Block filesystem, SSRF and dynamic-SQL access from the query tool (65aeda7)

The query tool gated SQL only with is_read_only(), an advisory check on the leading keyword. A SELECT could still read local files via read_text() / read_csv() / glob() / ST_Read(), reach internal endpoints (read_csv('http://169.254.169.254/...')), or smuggle any of these past inspection with query('...'). An MCP client driven by untrusted data could be made to exfiltrate secrets (e.g. ~/.ssh/id_rsa) through the tool result.

Reject these functions in the query tool. core.unsafe_function() parses the SQL with DuckDB's own parser (json_serialize_sql) and walks the AST, so a call is found regardless of nesting, with a lexical scan as a fail-closed fallback for statements the parser refuses. The CLI keeps unrestricted SQL: it is run by a trusted local user, not an untrusted agent.

Also correct the tool docstring and server instructions, which described the tool as plain "read-only" and implied it was safe.

Continuous Integration

• release: Docs.queria.io デプロイフックのステップを削除 (9471d9b)

Documentation

• Describe query tool sandboxing in the README (4a21782)

Note that the MCP query tool runs SELECT-only over the catalogs and blocks file/URL readers and dynamic SQL, and point users at the CLI when they need unrestricted SQL.

---

Detailed Changes: v0.3.0...v0.3.1

v0.3.0

v0.3.0 (2026-07-18)

This release is published under the MIT License.

Continuous Integration

• Add Dependabot config for weekly dependency updates (814a2ed)

Documentation

• Add CLAUDE.md with release and docs-update guidance (438c113)

Features

• Cli コマンドと MCP ツール呼び出しにテレメトリを配線 (f9f2cfe)

• 匿名・オプトアウト可能なテレメトリ基盤を追加 (164a1a4)

---

Detailed Changes: v0.2.1...v0.3.0

v0.2.1

v0.2.1 (2026-07-17)

This release is published under the MIT License.

Bug Fixes

• cli: Align read-only error message with accepted statements (c5f4e87)

The read-only guard accepts VALUES, TABLE, and FROM statements in addition to the seven listed in the rejection message. Centralize the message as core.READONLY_ERROR next to _READONLY_RE and list all ten accepted statement types.

---

Detailed Changes: v0.2.0...v0.2.1

v0.2.0

v0.2.0 (2026-07-17)

This release is published under the MIT License.

Chores

• docs: Remove Zensical docs site (moved to queria-io/docs) (78439b7)

Continuous Integration

• release: Publish automatically on push to main (bd56301)

• release: Trigger docs.queria.io rebuild via deploy hook (8177948)

Documentation

• Document API tokens and direct-access CREATE SECRET (db21b9b)

• Update README usage for new commands (87f0532)

Features

• Add API token support (d0795aa)

Resolve tokens from --token flag, QUERIA_TOKEN env var, or ~/.config/queria/config.toml, and create a scoped DuckDB HTTP secret (BEARER_TOKEN) on connect. Add 'queria auth set-token/status/clear' subcommands and a rate-limit hint on HTTP 429

• Add info command and get_dataset_info MCP tool (2b979ca)

Shows a dataset's metadata (license, source URL, repository, schemas, last build time) as field/value rows. The README body is opt-in via --readme / include_readme because it can be long.

• Add summarize command (e79dc7b)

Runs DuckDB SUMMARIZE against a table referenced as dataset.schema.table (schema defaults to main). Documents that it scans the whole table over HTTP.

• Cross-catalog search over datasets, tables and columns (2bc845d)

Replaces the dataset-only search with a search across datasets, tables and columns backed by catalog.main.mart_search_entries. The MCP search_datasets tool is renamed to search accordingly.

• cli: Add markdown output format (92d1c4b)

---

Detailed Changes: v0.1.0...v0.2.0

v0.1.0

v0.1.0 (2026-07-11)

This release is published under the MIT License.

Chores

• Update org references from flo8s to queria-io (ca647a6)

Continuous Integration

• Test, docs deploy, and release workflows (5686528)

Documentation

• Documentation site for docs.queria.io (5045b94)

Features

• cli: Subcommand interface with table/csv/json/jsonl and file output (b1638a0)

• core: Read-only connection with auto-attach and catalog queries (cad8c13)

• mcp: Stdio MCP server with row and payload caps (630ec15)