v0.6.1

Final release of the mcp-toolz Python package.

This repository is now a Claude Code plugin marketplace (claude-toolz). There is no package to install — see the README.

The PyPI project is archived: existing pins keep working, and the signed artifacts and SLSA attestations attached to this release remain valid for them.

v0.6.0

What's Changed

• fix: resolve GitHub security alerts by @taylorleese in #121
• fix: resolve GitHub security alerts by @taylorleese in #123
• ci: add weekly resolve-github-alerts workflow by @taylorleese in #122
• fix: resolve GitHub security alerts by @taylorleese in #124

Full Changelog: v0.5.1...v0.6.0

v0.5.1

What's Changed

• fix: resolve GitHub security alerts by @taylorleese in #120

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

• Bump black from 26.3.0 to 26.3.1 in the pip group across 1 directory by @dependabot[bot] in #112
• deps(deps): bump the github-actions group with 6 updates by @dependabot[bot] in #113
• Bump the pip group across 1 directory with 2 updates by @dependabot[bot] in #115
• deps(deps): bump the python-dependencies group across 1 directory with 4 updates by @dependabot[bot] in #117
• fix(deps): upgrade pyjwt to 2.12.0 for CVE-2026-32597 by @taylorleese in #118

Full Changelog: v0.4.0...v0.5.0

v0.4.0

What's Changed

• deps(deps): bump python from adb6bdf to f0540d0 by @dependabot[bot] in #93
• deps(deps): bump debian from 56ff6d3 to 98f4b71 by @dependabot[bot] in #94
• deps(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #95
• deps(deps): bump the python-dependencies group with 2 updates by @dependabot[bot] in #96
• deps(deps): bump pip from 25.3 to 26.0.1 by @dependabot[bot] in #97
• deps(deps-dev): bump setuptools from 80.10.2 to 82.0.0 by @dependabot[bot] in #98
• Bump cryptography from 46.0.3 to 46.0.5 in the pip group across 1 directory by @dependabot[bot] in #99
• deps(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #100
• deps(deps): bump the python-dependencies group with 4 updates by @dependabot[bot] in #101
• deps(deps-dev): bump isort from 7.0.0 to 8.0.0 by @dependabot[bot] in #104
• deps(deps): bump the github-actions group with 4 updates by @dependabot[bot] in #102
• deps(deps): bump the python-dependencies group across 1 directory with 6 updates by @dependabot[bot] in #105
• deps(deps): bump python from f0540d0 to 5404df0 by @dependabot[bot] in #106
• deps(deps): bump debian from 98f4b71 to 74d56e3 by @dependabot[bot] in #107
• deps(deps): bump the github-actions group with 7 updates by @dependabot[bot] in #108
• deps(deps): bump the python-dependencies group across 1 directory with 9 updates by @dependabot[bot] in #110
• Strip to multi-LLM tools only, remove context/todo features by @taylorleese in #111

Full Changelog: v0.3.15...v0.4.0

v0.3.15

What's Changed

• Update MCP version badge to 1.26.0 in README by @taylorleese in #83
• Fix CI failures by updating pip to 26.0 by @taylorleese in #88
• deps(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #85
• deps(deps): bump the python-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #89
• Fix all security vulnerabilities (pip, protobuf, jaraco-context) by @taylorleese in #90
• Release v0.3.15 by @taylorleese in #91
• Update pre-commit hooks and apply black formatting by @taylorleese in #92

Full Changelog: v0.3.14...v0.3.15

v0.3.14

What's Changed

• deps(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #65
• deps(deps): bump the python-dependencies group with 3 updates by @dependabot[bot] in #66
• Bump virtualenv from 20.35.4 to 20.36.1 in the pip group across 1 directory by @dependabot[bot] in #67
• Fix security vulnerabilities in pyasn1 and filelock by @taylorleese in #68
• deps(deps): bump debian from d5d3f9c to 56ff6d3 by @dependabot[bot] in #69
• deps(deps): bump python from e8a1ad8 to adb6bdf by @dependabot[bot] in #70
• deps(deps): bump sigstore/gh-action-sigstore-python from 83f564655de7b13d61efc9f2ece95e678716af5a to 74f66c751af05532c4724a03dbbb46301f0ed486 in the github-actions group by @dependabot[bot] in #71
• deps(deps): bump the python-dependencies group with 3 updates by @dependabot[bot] in #72
• deps(deps-dev): bump black from 25.12.0 to 26.1.0 by @dependabot[bot] in #73
• Bump wheel from 0.45.1 to 0.46.2 in the pip group across 1 directory by @dependabot[bot] in #74
• Bump sigstore from 4.1.0 to 4.2.0 in the pip group across 1 directory by @dependabot[bot] in #78
• Bump python-multipart from 0.0.20 to 0.0.22 in the pip group across 1 directory by @dependabot[bot] in #79
• deps(deps): bump the github-actions group with 5 updates by @dependabot[bot] in #76
• deps(deps): bump the python-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #80
• Bump pnpm from 10.27.0 to 10.28.2 in /docker/glama in the npm_and_yarn group across 1 directory by @dependabot[bot] in #75
• Security fixes and version bump to 0.3.14 by @taylorleese in #81
• Add .trivyignore to suppress protobuf CVE-2026-0994 by @taylorleese in #82

Full Changelog: v0.3.13...v0.3.14

v0.3.13

Bump version to 0.3.13 and fix urllib3 security vulnerability (#64)

* Bump version to 0.3.13 and regenerate requirements

- Bump version from 0.3.12 to 0.3.13
- Regenerate requirements.txt and requirements-dev.txt with urllib3==2.6.3
- Fixes CVE-2026-21441: Decompression-bomb safeguards bypassed when following HTTP redirects

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* Restore Linux-specific dependencies (SecretStorage, jeepney)

- Add back SecretStorage and jeepney for Linux compatibility
- These were removed during macOS pip-compile but are needed for CI

---------

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>

v0.3.12

What's Changed

• Bump filelock from 3.20.0 to 3.20.1 in the pip group across 1 directory by @dependabot[bot] in #52
• deps(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #53
• deps(deps): bump the python-dependencies group with 5 updates by @dependabot[bot] in #54
• Bump version to 0.3.12 by @taylorleese in #55

Full Changelog: v0.3.11...v0.3.12

v0.3.11

What's Changed

• deps(deps): bump debian from b4aa902 to e899040 by @dependabot[bot] in #46
• deps(deps): bump python from 5d17fc0 to 404ca55 by @dependabot[bot] in #47
• deps(deps): bump the github-actions group with 5 updates by @dependabot[bot] in #48
• deps(deps): bump the python-dependencies group with 6 updates by @dependabot[bot] in #49
• deps(deps): bump codecov/test-results-action from 1.1.1 to 1.2.1 in the github-actions group by @dependabot[bot] in #50
• Bump version to 0.3.11 by @taylorleese in #51

Full Changelog: v0.3.10...v0.3.11