Skip to content

mcp-data-platform-v1.67.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 May 01:19
· 70 commits to main since this release
v1.67.4
f719699
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's fixed

Collection shares can now be deleted (#485)

The share revoke handler assumed every share belonged to an asset and verified ownership by looking up the asset. Collection shares store a collection_id instead of an asset_id, so the asset lookup returned 404 on every DELETE attempt. The trash icon in the share dialog fired the mutation but the backend rejected it silently, leaving operators unable to remove any collection share (email or link) without direct database access.

Fix: revokeShare now branches on share.CollectionID. If set, ownership is verified against the collection; otherwise the existing asset-ownership path runs. The store's Revoke method was already generic, so no schema or store changes were needed.

Shared collection thumbnails now load for recipients (#485)

The collection thumbnail endpoint checked authentication but not share-based authorization. Users with a valid share grant saw the collection contents fine but got 403 on the thumbnail image, leaving a broken image placeholder in the shared collections view.

Fix: getCollectionThumbnail now checks owner-or-share-permission before serving the image, matching the pattern already used by getCollection.

Changelog

Bug Fixes

  • 43843e0: fix(portal): collection share revoke and shared thumbnail access (#485) (@cjimti)

CI & Dependencies

  • e3cd754: ci: bump codecov/codecov-action from 6.0.0 to 6.0.1 (#477)
  • f719699: ci: bump docker/login-action from 4.1.0 to 4.2.0 (#478)
  • 03b42a5: ci: bump github/codeql-action from 4.35.5 to 4.36.0 (#472)
  • a2910df: ci: bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 (#475)
  • 82816c1: deps: bump github.com/getkin/kin-openapi from 0.138.0 to 0.139.0 (#474)
  • cae6a37: deps: bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1 (#476)
  • 7088f22: deps: bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#473)

Installation

Homebrew (macOS)

brew install txn2/tap/mcp-data-platform

Claude Code CLI

claude mcp add mcp-data-platform -- mcp-data-platform

Docker

docker pull ghcr.io/txn2/mcp-data-platform:v1.67.4

Verification

All release artifacts are signed with Cosign. Verify with:

cosign verify-blob --bundle mcp-data-platform_1.67.4_linux_amd64.tar.gz.sigstore.json \
  mcp-data-platform_1.67.4_linux_amd64.tar.gz

Contributors

cjimti
Assets 25
Loading