v0.5.5

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:0e94e6ef970ac1df84862d61d4f0ef9c68cafac770963cab31a5c12060058281

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:0e94e6ef970ac1df84862d61d4f0ef9c68cafac770963cab31a5c12060058281 --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.5.5

What's Changed

• chore: sync main after 0.5.4 and pin the image digest by @wudaoyou in #102
• ci(release): publish to the MCP Registry with GitHub Actions OIDC by @wudaoyou in #103
• chore(deps): bump the pip-minor-patch group with 3 updates by @dependabot[bot] in #96
• fix(mcp): delete old payloads on write; prepare 0.5.5 by @wudaoyou in #104
• chore(release): 0.5.5 by @wudaoyou in #105

Full Changelog: v0.5.4...v0.5.5

v0.5.4

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:a5b04f1c04c7efe97345f27246117dcbee941ec97cdba89deeffa60212724e28

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:a5b04f1c04c7efe97345f27246117dcbee941ec97cdba89deeffa60212724e28 --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.5.4

What's Changed

• chore: sync main after 0.5.2 and pin the image digest by @wudaoyou in #82
• fix: tighten connection overrides, Compound Employee inputs and request limits by @wudaoyou in #93
• fix(ce): accept : / + in Compound Employee ID and code values by @wudaoyou in #94
• chore(release): prepare 0.5.3 by @wudaoyou in #95
• fix: security hardening from the 2026-09-29 assessment (#83-#92) by @wudaoyou in #99
• chore(release): prepare 0.5.4 by @wudaoyou in #100
• chore: merge main (0.5.3) back into develop by @wudaoyou in #98
• chore(release): 0.5.4 by @wudaoyou in #101

Full Changelog: v0.5.3...v0.5.4

v0.5.3

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:0b75533ae028ed90322c58341f29a3f192301b1f83984deed33c4452ee26bcad

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:0b75533ae028ed90322c58341f29a3f192301b1f83984deed33c4452ee26bcad --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.5.3

What's Changed

• chore(release): 0.5.3 by @wudaoyou in #97

Full Changelog: v0.5.2...v0.5.3

v0.5.2

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:88c7987a099056cd6fa652c444a400749654f762920cfdc1627dac368122e7e0

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:88c7987a099056cd6fa652c444a400749654f762920cfdc1627dac368122e7e0 --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.5.2

What's Changed

• chore: sync main after 0.5.1 and pin the image digest by @wudaoyou in #78
• fix: tighten PII tokenization boundaries by @wudaoyou in #79
• chore(release): prepare 0.5.2 by @wudaoyou in #80
• chore(release): 0.5.2 by @wudaoyou in #81

Full Changelog: v0.5.1...v0.5.2

v0.5.1

Warning

Affected by GHSA-49pc-pwrc-7hxh and GHSA-j2w9-fgjg-vmj6: MCP PII tokens can resolve on tenants other than the one that issued them, and tokenization can skip fields, entities and Compound Employee segments missing from its map. Upgrade to v0.5.2.

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:1d9695a1d9ae28c4c3897d33a38b154dc482741aab0ce9c56a4a4276b1347021

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:1d9695a1d9ae28c4c3897d33a38b154dc482741aab0ce9c56a4a4276b1347021 --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.5.1

What's Changed

• chore: sync main after 0.5.0 and pin the image digest by @wudaoyou in #74
• fix(mcp): confine metadata tools to $metadata documents by @wudaoyou in #75
• chore(release): prepare 0.5.1 by @wudaoyou in #76
• chore(release): 0.5.1 by @wudaoyou in #77

Full Changelog: v0.5.0...v0.5.1

v0.5.0

Warning

Affected by GHSA-49pc-pwrc-7hxh and GHSA-j2w9-fgjg-vmj6: MCP PII tokens can resolve on tenants other than the one that issued them, and tokenization can skip fields, entities and Compound Employee segments missing from its map. Upgrade to v0.5.2.

Warning

Affected by GHSA-6j2f-2vg9-8j59: the MCP metadata tools can return untokenized employee records. Upgrade to v0.5.1.

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:cca69da7ec9ad4ff123c64632f37f184730ff27a7c24f568a6f46b1da430260e

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:cca69da7ec9ad4ff123c64632f37f184730ff27a7c24f568a6f46b1da430260e --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.5.0

What's Changed

• chore: sync main after 0.4.1 and pin the image digest by @wudaoyou in #70
• feat(odata): complete OData v4 support by @wudaoyou in #71
• chore(release): prepare 0.5.0 by @wudaoyou in #72
• chore(release): 0.5.0 by @wudaoyou in #73

Full Changelog: v0.4.1...v0.5.0

v0.4.1

Warning

Affected by GHSA-49pc-pwrc-7hxh and GHSA-j2w9-fgjg-vmj6: MCP PII tokens can resolve on tenants other than the one that issued them, and tokenization can skip fields, entities and Compound Employee segments missing from its map. Upgrade to v0.5.2.

Warning

Affected by GHSA-6j2f-2vg9-8j59: the MCP metadata tools can return untokenized employee records. Upgrade to v0.5.1.

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:15137142ace8ce1dfda0f6d06a2d53d42f655a8f8a3d2382c6027c060643ca66

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:15137142ace8ce1dfda0f6d06a2d53d42f655a8f8a3d2382c6027c060643ca66 --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.4.1

What's Changed

• chore: sync main after 0.4.0 and pin the image digest by @wudaoyou in #67
• chore: add MCP Registry metadata and prepare 0.4.1 by @wudaoyou in #68
• chore(release): 0.4.1 by @wudaoyou in #69

Full Changelog: v0.4.0...v0.4.1

v0.4.0

Warning

Affected by GHSA-49pc-pwrc-7hxh and GHSA-j2w9-fgjg-vmj6: MCP PII tokens can resolve on tenants other than the one that issued them, and tokenization can skip fields, entities and Compound Employee segments missing from its map. Upgrade to v0.5.2.

Warning

Affected by GHSA-6j2f-2vg9-8j59: the MCP metadata tools can return untokenized employee records. Upgrade to v0.5.1.

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:88937b4917ba461aa19e9a3edc692f97153e735fb7650dbb3ce7904ddb78ae23

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:88937b4917ba461aa19e9a3edc692f97153e735fb7650dbb3ce7904ddb78ae23 --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.4.0

What's Changed

• chore: sync main after 0.3.3 and pin the image digest by @wudaoyou in #63
• feat(tenants)!: per-tenant connection and PII settings in {company_id}.json by @wudaoyou in #64
• chore(release): prepare 0.4.0 by @wudaoyou in #65
• chore(release): 0.4.0 by @wudaoyou in #66

Full Changelog: v0.3.3...v0.4.0

v0.3.3

Warning

Affected by GHSA-49pc-pwrc-7hxh and GHSA-j2w9-fgjg-vmj6: MCP PII tokens can resolve on tenants other than the one that issued them, and tokenization can skip fields, entities and Compound Employee segments missing from its map. Upgrade to v0.5.2.

Warning

Affected by GHSA-6j2f-2vg9-8j59: the MCP metadata tools can return untokenized employee records. Upgrade to v0.5.1.

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:01a69b4e7afb7007d343b0ef1501562cadb6d8f1920ef4d73b281c9576165e9b

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:01a69b4e7afb7007d343b0ef1501562cadb6d8f1920ef4d73b281c9576165e9b --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.3.3

What's Changed

• chore: sync main after 0.3.2 and pin its image digest by @wudaoyou in #59
• feat: per-tenant production flag drives the MCP PII tier by @wudaoyou in #60
• chore(release): prepare 0.3.3 by @wudaoyou in #61
• chore(release): 0.3.3 by @wudaoyou in #62

Full Changelog: v0.3.2...v0.3.3

v0.3.2

Warning

Affected by GHSA-49pc-pwrc-7hxh and GHSA-j2w9-fgjg-vmj6: MCP PII tokens can resolve on tenants other than the one that issued them, and tokenization can skip fields, entities and Compound Employee segments missing from its map. Upgrade to v0.5.2.

Warning

Affected by GHSA-6j2f-2vg9-8j59: the MCP metadata tools can return untokenized employee records. Upgrade to v0.5.1.

Container image

docker.io/wudaoyou/successfactors-toolkit@sha256:e3a502c67c4bfd3cc623074382f4767c1b9f9445ddddc72ec9b82bba87b5519a

Verify its provenance with:

gh attestation verify oci://docker.io/wudaoyou/successfactors-toolkit@sha256:e3a502c67c4bfd3cc623074382f4767c1b9f9445ddddc72ec9b82bba87b5519a --repo wudaoyou/successfactors-toolkit --signer-workflow wudaoyou/successfactors-toolkit/.github/workflows/release.yml --source-ref refs/tags/v0.3.2

What's Changed

• chore: sync main after 0.3.1 and pin its image digest by @wudaoyou in #55
• fix: tokenize login names and stop snapshot paging with $top/$skip by @wudaoyou in #56
• chore(release): prepare 0.3.2 by @wudaoyou in #57
• chore(release): 0.3.2 by @wudaoyou in #58

Full Changelog: v0.3.1...v0.3.2