@juvantlabs/m365-graph-mcp-server 0.1.1 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +38 -1
- package/dist/index.js +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -9,7 +9,44 @@ project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
|
9
9
|
|
|
10
10
|
---
|
|
11
11
|
|
|
12
|
-
## [
|
|
12
|
+
## [0.1.3] - 2026-05-04
|
|
13
|
+
|
|
14
|
+
### Fixed
|
|
15
|
+
|
|
16
|
+
- Publish workflow now upgrades npm to latest before running
|
|
17
|
+
`npm publish`. v0.1.2's first attempt at the Trusted Publishing
|
|
18
|
+
migration failed with 404 from the npm publish PUT — root cause
|
|
19
|
+
was npm 10 (bundled with Node 20) signing provenance via OIDC but
|
|
20
|
+
not using OIDC for publish auth. Trusted Publishing requires
|
|
21
|
+
npm ≥ 11.5.1; the workflow now installs `npm@latest` after
|
|
22
|
+
setup-node so subsequent runs are independent of which npm
|
|
23
|
+
ships with the chosen Node version.
|
|
24
|
+
|
|
25
|
+
## [0.1.2] - 2026-05-04 (failed publish)
|
|
26
|
+
|
|
27
|
+
### Changed
|
|
28
|
+
|
|
29
|
+
- Attempted migration from granular access token (`NPM_TOKEN`) to
|
|
30
|
+
npm Trusted Publishing (OIDC-based auth). The change to the
|
|
31
|
+
workflow was correct (NODE_AUTH_TOKEN removed, id-token: write
|
|
32
|
+
preserved, trusted publisher registered on npmjs.com) but the
|
|
33
|
+
bundled npm 10 didn't honor OIDC for publish auth — see 0.1.3
|
|
34
|
+
for the fix. **0.1.2 was not actually published to npm.**
|
|
35
|
+
|
|
36
|
+
## [0.1.1] - 2026-05-04
|
|
37
|
+
|
|
38
|
+
### Fixed
|
|
39
|
+
|
|
40
|
+
- Symlink-safe entrypoint guard in `src/index.ts`. v0.1.0 silently
|
|
41
|
+
no-op'd under `npx @juvantlabs/m365-graph-mcp-server` because the
|
|
42
|
+
`process.argv[1].endsWith("dist/index.js")` heuristic returned
|
|
43
|
+
false for the npm `bin` symlink (`node_modules/.bin/<name>` →
|
|
44
|
+
`dist/index.js`, no `.js` suffix on argv[1]). Replaced with
|
|
45
|
+
`realpathSync(argv[1]) + pathToFileURL` comparison against
|
|
46
|
+
`import.meta.url`. Same fix backported to the scaffolder template
|
|
47
|
+
at `juvantlabs/juvant-tools` v0.3.3 with a regression test.
|
|
48
|
+
|
|
49
|
+
## [0.1.0] - 2026-05-04
|
|
13
50
|
|
|
14
51
|
### Added
|
|
15
52
|
|
package/dist/index.js
CHANGED
|
@@ -79,7 +79,7 @@ async function runMcpServer() {
|
|
|
79
79
|
const logLevel = process.env.MCP_SERVER_LOG_LEVEL ?? "info";
|
|
80
80
|
const server = new Server({
|
|
81
81
|
name: "@juvantlabs/m365-graph-mcp-server",
|
|
82
|
-
version: "0.1.
|
|
82
|
+
version: "0.1.3",
|
|
83
83
|
}, {
|
|
84
84
|
capabilities: { tools: {} },
|
|
85
85
|
});
|
package/package.json
CHANGED