@daften/fireflyiii-mcp 0.4.3 → 0.4.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +11 -1
  2. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
7
7
 
8
8
  ## [Unreleased]
9
9
 
10
+ ## [0.4.4] - 2026-09-05
11
+
12
+ ### Security
13
+
14
+ - chore(deps): Bump qs from 6.15.2 to 6.16.0 in the security-fixes group across 1 directory (automated security release)
15
+
16
+ ### Fixed
17
+ - `auto-merge.yml` still never enabled auto-merge on Dependabot security PRs. `alert-lookup` was being passed the default `GITHUB_TOKEN`, which cannot read the Dependabot alerts API; `dependabot/fetch-metadata` reports that by returning an empty `alert-state` instead of failing, so the merge step's guard stayed false while the job reported success. The metadata step now uses the `RELEASE_TOKEN` PAT (which needs `Dependabot alerts: Read only`), and a new guard step fails the job outright when a `security-fixes`-group PR produces no `alert-state`, so an expired or under-scoped token can no longer masquerade as a passing check. ([#86](https://github.com/daften/fireflyiii-mcp/pull/86))
18
+
10
19
  ## [0.4.3] - 2026-09-03
11
20
 
12
21
  ### Security
@@ -150,7 +159,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
150
159
  - npm publish provenance via GitHub OIDC.
151
160
  - GitHub Release auto-created from the tag annotation on each `v*` tag push.
152
161
 
153
- [Unreleased]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.3...HEAD
162
+ [Unreleased]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.4...HEAD
163
+ [0.4.4]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.3...v0.4.4
154
164
  [0.4.3]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.2...v0.4.3
155
165
  [0.4.2]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.1...v0.4.2
156
166
  [0.4.1]: https://github.com/daften/fireflyiii-mcp/compare/v0.4.0...v0.4.1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@daften/fireflyiii-mcp",
3
- "version": "0.4.3",
3
+ "version": "0.4.4",
4
4
  "description": "MCP server for Firefly III personal finance manager",
5
5
  "type": "module",
6
6
  "bin": {