v0.7.1

What's new

Added

• Release archives and the Docker image are signed with Sigstore and come with SBOMs; the README shows how to verify them.

Changed

• create_issue and update_issue reuse a project's field schema for five minutes instead of reading it on every call, and read it again when a cached one rejects a field or value.

Changelog

Other

• 74a7dcb: perf(tools): reuse a project's field schema for five minutes (@xlsft)

Install

macOS / Linux:

curl -fsSL https://raw.githubusercontent.com/xlsft/ymcp/main/install.sh | sh

Windows (PowerShell):

irm https://raw.githubusercontent.com/xlsft/ymcp/main/install.ps1 | iex

Already installed: ymcp update. Docker: docker pull xlsoftware/ymcp:0.7.1.

Verify

checksums.txt is signed with Sigstore by this repository's release workflow:

cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/xlsft/ymcp/\.github/workflows/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt

Each archive has an SPDX SBOM next to it (*.sbom.json).