v1.3.0

Add an optional replyTo address to m365_mail_send so replies can go to a different inbox while messages still come from the signed-in account. Existing calls work unchanged, using the same Mail.Send permission.

Refresh the README comparison against the current published packages, clarify the email-body limit and task completion, correct the development command example, and add Glama maintainer metadata.

v1.2.1

Clearer descriptions and parameter guidance for 22 tools, covering when to browse, search, read content, or fetch metadata.

Mail, calendar, and Teams tools now explain immediate sends, attendee notifications, and duplicate-submission risks. Listing tools clarify folder scope, result limits, and shortened content. The mail-read description also correctly states its 10,000-character body limit.

Tool implementations, names, permissions, and safety annotations are unchanged. This release also refreshes locked dependencies with upstream security fixes.

v1.2.0

Calendar notes and selected-calendar support are now available, thanks to @tilor's PR #5.

• Read an event's notes with m365_calendar_get, including body format, full length, and truncation status.
• Select a calendar with calendarId when listing, reading, creating, or updating events.
• Create and replace notes as text or HTML, or explicitly clear them with an empty body.

The server now has 47 tools. These calendar additions use the existing permissions, and the new read tool works in read-only mode.

This release also includes all v1.1.1 fixes: safer write retries, bounded file downloads, hardened authentication storage, and calendar/Teams corrections.

When replacing notes, use the complete body and preserve any online-meeting details. Truncated output is marked so it can be distinguished from the full notes.

v1.1.1

This release fixes retry safety, download memory use, authentication storage, and Microsoft Graph tool behavior.

• Avoid automatically replaying writes after connection failures or server errors. Check the target before retrying an uncertain write.
• Stream file reads within the requested byte limit, and honor retry delays for temporary failures.
• Save account and token files atomically, reject unsafe account labels, and invalidate cached tokens when tenant/client settings change.
• Correct calendar timezone/DST handling and Teams meeting links, chat-send routing, mail filters, and directory searches.
• Validate tool arguments and result limits. Update dependencies and add Windows/Linux test coverage.

Sign in again after upgrading if prompted about changed permissions. Write-enabled mode now requests Files.ReadWrite for folder creation. Organization directory access remains off by default; enable M365_MCP_DIRECTORY_READ=true during login and server startup only if needed, with delegated User.Read.All and admin consent.

Verified locally with 176 passing tests, a TypeScript build, normal/read-only MCP checks, and package inspection. No live Microsoft 365 tenant acceptance testing was performed. PR #5's calendar-notes feature is not included in this release.