@daften/fireflyiii-mcp 0.4.1-nightly.20260802T0550 → 0.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +17 -3
  2. package/package.json +2 -2
package/CHANGELOG.md CHANGED
@@ -7,8 +7,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
7
7
 
8
8
  ## [Unreleased]
9
9
 
10
- ### Changed
11
- - Releases are now cut on a short-lived `release/X.Y.Z` branch that reaches `main` as a single PR, instead of a promotion merge followed by a separate release commit on `main`. Since `backmerge.yml` runs on every push to `main`, the old shape back-merged twice per release; this shape does it once, puts the release commit through CI, and leaves `auto-release.yml` as the only thing committing directly to `main`. `backmerge.yml` itself now merges and pushes to `develop` directly, opening a PR only when the merge conflicts and needs manual resolution.
10
+ ## [0.4.2] - 2026-08-04
11
+
12
+ ### Security
13
+
14
+ - chore(deps): Bump the security-fixes group across 1 directory with 2 updates (automated security release)
15
+
16
+ ## [0.4.1] - 2026-08-04
17
+
18
+ ### Security
19
+
20
+ - chore(deps): Bump ip-address from 10.2.0 to 10.4.0 in the security-fixes group across 1 directory (automated security release)
21
+
22
+ ### Fixed
23
+ - `auto-merge.yml` never actually enabled auto-merge on Dependabot security PRs: the `dependabot/fetch-metadata` step omitted `alert-lookup: true`, so `alert-state` was always empty and the merge step's guard condition was never true. Added `alert-lookup: true` to populate it.
12
24
 
13
25
  ## [0.4.0] - 2026-08-02
14
26
 
@@ -132,7 +144,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
132
144
  - npm publish provenance via GitHub OIDC.
133
145
  - GitHub Release auto-created from the tag annotation on each `v*` tag push.
134
146
 
135
- [Unreleased]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.0...HEAD
147
+ [Unreleased]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.2...HEAD
148
+ [0.4.2]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.1...v0.4.2
149
+ [0.4.1]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.0...v0.4.1
136
150
  [0.4.0]: https://github.com/daften/fireflyiii-mcp/compare/v0.3.4...v0.4.0
137
151
  [0.3.4]: https://github.com/daften/fireflyiii-mcp/compare/v0.3.3...v0.3.4
138
152
  [0.3.3]: https://github.com/daften/fireflyiii-mcp/compare/v0.3.2...v0.3.3
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@daften/fireflyiii-mcp",
3
- "version": "0.4.1-nightly.20260802T0550",
3
+ "version": "0.4.2",
4
4
  "description": "MCP server for Firefly III personal finance manager",
5
5
  "type": "module",
6
6
  "bin": {
@@ -58,7 +58,7 @@
58
58
  "overrides": {
59
59
  "@hono/node-server": "^2.0.5",
60
60
  "esbuild": "^0.28.1",
61
- "hono": "^4.12.31"
61
+ "hono": "^4.13.0"
62
62
  },
63
63
  "devDependencies": {
64
64
  "@biomejs/biome": "2.5.6",