What's New in v1.5.0
Changes
- release: v1.5.0 — get_syllabus, create_rubric_from_csv, update_discussion_topic; fastmcp 2.x; security hardening
- docs: MCP Apps interactive-UI feasibility (analytics pilot) (#117)
- security: upgrade deps, gate dependency-scan CI, harden ts container sandbox (#156)
- build(docker): install the [hosted] extra so the image supports the access-approval flow (#153)
- docs: remove SBC 511 course tasks from session log; reconcile PR #155 merged
- docs: bump role tool counts and add CHANGELOG entry for update_discussion_topic
- docs: wrap session — update_discussion_topic draft PR #155 open
- Add update_discussion_topic tool to edit discussion prompts via MCP (#154).
- docs: wrap session — Canvas token renewed + verified, SBC 511 launch audit queued
- docs: wrap session — fixed Claude Desktop connector auth (Entra manifest), Canvas token expired
- docs: wrap session — pulled PR #152 (fastmcp 2.x migration), tests verified green
- refactor: migrate to fastmcp 2.x (#145, PR 1 of 2) (#152)
- docs: wrap session — PR #150 merged, #151 closed as false positive, ruleset fixed
- feat: self-service access-approval flow for the hosted (Entra-gated) server (#150)
- docs: wrap session — Adam email sent, compliance PDF/HTML regenerated (overflow fix), hosted server verified live
- docs: wrap session — #146 closed, compliance doc overhauled for IT/LRA review, Aptos email standard
- chore(gitignore): broaden internal/docs .local pattern to .local.* (was .local.md only)
- chore: untrack internal/SECURITY-COMPLIANCE.md (operator-only, not public)
- docs(compliance): lead with course-ops-at-scale as primary use case
- docs(compliance): add risk-graded deployment tiers + model-portability framing
- docs(compliance): reflect live Entra auth — P0 IT05/FO-36 identity gap resolved
- chore(impact): refresh stats 2026-06-29 (stars 153, forks 45)
- docs(internal): point README at hosted ops runbook (#146 OAuth troubleshooting)
- docs: slim CLAUDE.md — relocate architecture + #146 post-mortem
- refactor: rename canvas_api_url_raw to canvas_api_url_configured (#149)
- fix: normalize CANVAS_API_URL to canonical /api/v1 form (#148)
- docs: include /api/v1 in Desktop Extension Canvas API URL example (#143)
- docs: wrap session — 2 faculty added to hosted allowlist (7→9 OIDs), onboarding-simplification thread
- docs: refresh impact stats (stars 150, forks 42; 2026-06-22 datapoint)
- docs: log hosted .mcpb npx/PATH launch fix (vendored mcp-remote)
- docs: wrap session — public-site leak fix, hosted access lockdown, onboarding, hosted .mcpb
- fix(site): stop publishing local-only ops/compliance docs
- docs: adversarial architecture review + move internal docs off the public site (#139)
- chore: refresh Canvas API docs link + pin mypy <2 (#141)
- fix(courses): honor CANVAS_ROLE in list_courses, scope to active enrollments (#140)
- feat: add create_rubric_from_csv tool for native CSV imports (#132)
- test: cover code_execution security helpers and Canvas User-Agent (#138)
- feat(courses): add get_syllabus tool for full untruncated syllabus body (#137)
- docs: fix dead Troubleshooting anchor (#configuration -> #local-installation) (#133)
- docs: wrap session — v1.4.0 released, Desktop Extension, repo sanitized
- chore: sync uv.lock to v1.4.0
Released: July 05, 2026
For installation instructions, see the README.