bookstack-mcp v5.5.0

This release includes the changes since v5.4.1. Upgrade for safer error reporting,
new gallery tools, and optional page revision summaries.

Added

create_page and update_page accept an optional changelog message of
1–180 characters. BookStack v26.09+ saves it in page history; older servers
ignore the field.
Gallery tools: list_images, create_image, and delete_image. Uploads accept
a local file or HTTP(S) URL and return BookStack-hosted image information.
HTTP deployments disable local files by default and require an image hostname
allowlist, checked again after redirects.
Opt-in per-request BookStack credentials for HTTP deployments using paired
X-Bookstack-Token-Id / X-Bookstack-Token-Secret headers. Credential overrides
follow the current request even when an MCP session is reused, with private
slug caches. Requests without overrides use the configured fallback token.
priority on update_page and update_chapter for ordering within a book.
A privacy policy covering credentials, data flows, OAuth/Redis state, and
logging, included in the npm package, plus security reporting guidance.

Error boundaries and logs exclude raw Axios configuration, upstream response
bodies, OAuth failure descriptions, and URL credentials/query strings. Safe
status/error codes remain available; successful tool and OAuth responses
retain their normal payloads. Older releases may expose sensitive information
in failures, so upgrade and review access to previously collected logs.
API requests now have a total budget covering queueing, HTTP attempts, and
rate-limit backoff. Retry delays are capped at 30 seconds, permits are released
during backoff, and exhausted retries return an explicit rate-limit error.
Listing filters work with Zod 4.
MCPB packaging avoids shell interpolation and validates the package version.
Fork pull requests build Docker previews without GHCR login or publication.

Updated dependencies include MCP SDK 1.31.0, Axios 1.20.0, Zod 4.6.5, and
jose 6.2.12 in the lockfile, plus development tools and pinned GitHub Actions.
Added an offline HOL Guard scan in CI and a live trust-score README badge.
This does not assert registry verification or a particular registry score.
Package, Claude plugin, and Gemini extension versions are synchronized to
5.5.0; runtime and MCPB versions derive from the package version.
Existing write and OAuth role gates remain in place. Per-request credentials
require BOOKSTACK_ALLOW_REQUEST_CREDENTIALS=true; HTTP image access is
controlled by BOOKSTACK_ALLOW_LOCAL_IMAGE_FILES and
BOOKSTACK_IMAGE_ALLOWED_HOSTS. Use HTTPS or a trusted internal connection
for credential headers and redact them in proxies.
BOOKSTACK_TIMEOUT_MS defaults to 30 seconds per HTTP attempt;
BOOKSTACK_RETRY_TIMEOUT_MS defaults to 60 seconds per API request. Tools that
call several endpoints can take longer overall.