@socketsecurity/mcp 0.0.20 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -5,7 +5,62 @@ All notable changes to `@socketsecurity/mcp` will be documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
- ## [Unreleased]
8
+ ## [0.2.0](https://github.com/SocketDev/socket-mcp/releases/tag/v0.2.0) - 2026-09-15
9
+
10
+ ### Internal
11
+
12
+ - **`ci`** — normalize workflow labels
13
+
14
+ ## [0.1.0](https://github.com/SocketDev/socket-mcp/releases/tag/v0.1.0) - 2026-09-14
15
+
16
+ ### Added
17
+
18
+ - **`mcp`** — structured audit logging for MCP tool executions
19
+ - **`mcp`** — serve the stateless protocol on the v2 sdk
20
+
21
+ ### Changed
22
+
23
+ - The copyable socket-gate hook directory in the published package moved from
24
+ `hooks/socket-gate` to `dist/socket-gate`.
25
+
26
+ ### Fixed
27
+
28
+ - **`telemetry`** — forward MCP client identity to Socket API
29
+ - **`build`** — omit dependency documentation from bundles
30
+ - **`tooling`** — keep debug client callbacks void
31
+ - **`tooling`** — classify the product entrypoint
32
+ - **`build`** — resolve current fleet entrypoint helpers
33
+ - **`oauth`** — reject tokens at expiration and verify reauthorization
34
+ - match Socket coverage badge styling
35
+ - **`server`** — refine artifact lookup and request checks
36
+ - **`fuzz`** — match .mts targets and stay quiet on an empty run
37
+ - **`workspace`** — drop pnpm settings current pnpm rejects
38
+ - **`docs`** — remove trailing space inside a code span
39
+ - **`origin`** — trust the hosted deployment's Host over a strict Origin allowlist (#214)
40
+ - **`mcp`** — use socket-lib isPlainObject in maskArgs
41
+ - **`readme`** — serve the four images from absolute raw URLs
42
+ - **`catalog`** — sync the sdk -stable alias to its base version
43
+ - **`catalog`** — sync the sdk -stable alias to the held base version
44
+ - **`soak`** — drop the unpublishable bare stuie exclude
45
+ - **`scripts`** — drop npm-run-all2 and the dead llms-txt script
46
+ - **`oauth`** — bind tokens to this resource server and harden discovery
47
+ - **`build`** — stop the clean step racing concurrent cache writers
48
+
49
+ ### Internal
50
+
51
+ - **`ci`** — consolidate pins and collect offline server tests
52
+ - **`ci`** — read app client identifiers from secrets
53
+ - **`ci`** — use public app client identifiers
54
+ - **`ci`** — read payload client ids from secrets
55
+ - **`config`** — reconcile repository-owned files
56
+ - **`ci`** — use inline checkout bootstrap
57
+ - **`ci`** — align lockfile with hydrated catalogs
58
+ - **`bootstrap`** — await the newest fleet reference
59
+ - **`deps`** — restore the missing yaml catalog entry
60
+ - **`deps`** — drop the orphaned pnpm package-manager pin
61
+ - **`deps`** — restore the payload importer the lockfile dropped
62
+ - **`ci`** — keep the zizmor config tracked, it is not fleet payload
63
+ - **`lint`** — escape raw NULs and hoist bypass markers
9
64
 
10
65
  ## [0.0.20]
11
66