@daften/fireflyiii-mcp 0.2.1 → 0.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +11 -1
- package/README.md +11 -0
- package/package.json +6 -3
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [0.2.2] - 2026-06-14
|
|
11
|
+
|
|
12
|
+
### Added
|
|
13
|
+
- Nightly builds: on nights `main` changes, the `publish.yml` workflow now also publishes an unstable prerelease to npm (`nightly` dist-tag), Docker (`ghcr.io/daften/fireflyiii-mcp:nightly`), and a GitHub pre-release. Release and nightly share one workflow file so they share the single npm trusted-publisher (OIDC) configuration. Default installs (`@latest` / `:latest`) are never affected. Install unreleased changes via `@daften/fireflyiii-mcp@nightly`.
|
|
14
|
+
|
|
15
|
+
### Security
|
|
16
|
+
- Upgraded the docs toolchain from `vitepress@1.6.4` to `vitepress@2.0.0-alpha.17`, which moves the docs build onto Vite 7. This resolves two Dependabot alerts in `devDependencies`: a path-traversal in Vite's optimized-deps `.map` handling (`vite ≤6.4.1`) and an esbuild dev-server request issue (`esbuild ≤0.24.2`). vitepress 2 is still pre-release but is required to reach a Vite version compatible with the patched esbuild; the version is pinned exactly and the docs build is verified.
|
|
17
|
+
- Pinned `esbuild` to `^0.28.1` across the whole `devDependencies` tree via an `overrides` entry, closing the remaining two Dependabot alerts: a high-severity binary-integrity / RCE-via-`NPM_CONFIG_REGISTRY` issue (`esbuild <0.28.1`) and a Windows dev-server file-read issue (`esbuild ≥0.27.3 <0.28.1`). `npm audit` now reports 0 vulnerabilities. The override only takes effect once on Vite 7 (above), since esbuild 0.28.1 is incompatible with the Vite 5 that vitepress 1.x used.
|
|
18
|
+
|
|
10
19
|
## [0.2.1] - 2026-06-11
|
|
11
20
|
|
|
12
21
|
### Added
|
|
@@ -57,7 +66,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
57
66
|
- npm publish provenance via GitHub OIDC.
|
|
58
67
|
- GitHub Release auto-created from the tag annotation on each `v*` tag push.
|
|
59
68
|
|
|
60
|
-
[Unreleased]: https://github.com/daften/fireflyiii-mcp/compare/v0.2.
|
|
69
|
+
[Unreleased]: https://github.com/daften/fireflyiii-mcp/compare/v0.2.2...HEAD
|
|
70
|
+
[0.2.2]: https://github.com/daften/fireflyiii-mcp/compare/v0.2.1...v0.2.2
|
|
61
71
|
[0.2.1]: https://github.com/daften/fireflyiii-mcp/compare/v0.2.0...v0.2.1
|
|
62
72
|
[0.2.0]: https://github.com/daften/fireflyiii-mcp/compare/v0.1.1...v0.2.0
|
|
63
73
|
[0.1.1]: https://github.com/daften/fireflyiii-mcp/compare/v0.1.0...v0.1.1
|
package/README.md
CHANGED
|
@@ -80,6 +80,17 @@ Your MCP client downloads and starts the server automatically on first use. No s
|
|
|
80
80
|
|
|
81
81
|
---
|
|
82
82
|
|
|
83
|
+
## Nightly builds (unstable)
|
|
84
|
+
|
|
85
|
+
Want to test unreleased changes from `main`? A nightly build is published automatically each night that `main` has changed. **These are unstable and not recommended for production.**
|
|
86
|
+
|
|
87
|
+
- **npm:** `npm install @daften/fireflyiii-mcp@nightly` (or `npx @daften/fireflyiii-mcp@nightly`)
|
|
88
|
+
- **Docker:** `docker pull ghcr.io/daften/fireflyiii-mcp:nightly`
|
|
89
|
+
|
|
90
|
+
A normal install (no tag) always resolves to the latest tagged release — `@latest` on npm and `:latest` on Docker are never moved to a nightly. To go back to a stable build, reinstall without the `@nightly` / `:nightly` tag.
|
|
91
|
+
|
|
92
|
+
---
|
|
93
|
+
|
|
83
94
|
## Experimental Autocomplete Prompts
|
|
84
95
|
|
|
85
96
|
→ See [Autocomplete prompts](https://daften.github.io/fireflyiii-mcp/reference/autocomplete) in the docs.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@daften/fireflyiii-mcp",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.2",
|
|
4
4
|
"description": "MCP server for Firefly III personal finance manager",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|
|
@@ -55,15 +55,18 @@
|
|
|
55
55
|
"@modelcontextprotocol/sdk": "^1.0.0",
|
|
56
56
|
"zod": "^4.4.3"
|
|
57
57
|
},
|
|
58
|
+
"overrides": {
|
|
59
|
+
"esbuild": "^0.28.1"
|
|
60
|
+
},
|
|
58
61
|
"devDependencies": {
|
|
59
|
-
"@biomejs/biome": "2.
|
|
62
|
+
"@biomejs/biome": "2.5.0",
|
|
60
63
|
"@types/node": "^25.9.1",
|
|
61
64
|
"@vitest/coverage-v8": "^4.1.8",
|
|
62
65
|
"dotenv-cli": "^11.0.0",
|
|
63
66
|
"simple-git-hooks": "^2.13.1",
|
|
64
67
|
"tsx": "^4.22.3",
|
|
65
68
|
"typescript": "^6.0.3",
|
|
66
|
-
"vitepress": "
|
|
69
|
+
"vitepress": "2.0.0-alpha.17",
|
|
67
70
|
"vitest": "^4.1.7"
|
|
68
71
|
},
|
|
69
72
|
"engines": {
|