v1.0.6

1.0.6 (2026-07-04)

Bug Fixes

• security: request-scoped credentials (AsyncLocalStorage) to close cross-tenant leak (#8) (e8bc612)

v1.0.5

1.0.5 (2026-06-22)

Bug Fixes

• security: SHA-pin auto-add-to-project.yml @main -> @6ae1533dd72f (warden C-4) (#4) (27ffc17)

v1.0.4

1.0.4 (2026-06-12)

Bug Fixes

• deps: refresh lockfile for current Trivy CVEs (2887a31)
• docker: apk upgrade in production stage to pull OpenSSL 3.5.7-r0 (4c1db80)

v1.0.3

1.0.3 (2026-06-12)

Bug Fixes

• docker: remove npm CLI from production image to clear Trivy base-image CVEs (817802d)

v1.0.2

1.0.2 (2026-05-29)

Bug Fixes

• http: /health is liveness, not credential-readiness (93807f7)

v1.0.1

1.0.1 (2026-05-26)

Bug Fixes

• ci: bump mcp-assert to auth-enabled reusable workflow; trim server.json description (53b63af)

v1.0.0

1.0.0 (2026-05-26)

Bug Fixes

• ci: correct assert canary tool and sync lockfile with published SDK (62f3fbd)

Features

• initial Kaseya Quote Manager MCP server (e7dbfe4)