drupal-mcp-connector 0.6.1 → 0.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +23 -0
- package/README.md +1 -1
- package/package.json +12 -12
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [0.7.0] - 2026-06-08
|
|
11
|
+
|
|
12
|
+
### Added
|
|
13
|
+
- CI: lint/syntax/unit tests now run across a Node `20, 22` matrix so the
|
|
14
|
+
advertised `engines.node >=20` floor is actually exercised.
|
|
15
|
+
- CI: `release.yml` publishes to npm on a `v*` tag via **trusted publishing**
|
|
16
|
+
(GitHub Actions OIDC — no token/secret), gated on a tag↔`package.json` version
|
|
17
|
+
match. Provenance is attached automatically. One-time trusted-publisher setup
|
|
18
|
+
on npmjs.com (see CONTRIBUTING.md → Releasing).
|
|
19
|
+
|
|
20
|
+
### Removed
|
|
21
|
+
- **BREAKING:** dropped support for Node 18 (`engines.node` is now `>=20.0.0`).
|
|
22
|
+
Node 18 reached end-of-life in April 2025, and the vitest 4 dev toolchain
|
|
23
|
+
requires Node >=20.
|
|
24
|
+
|
|
25
|
+
### Changed
|
|
26
|
+
- Dev dependency: bumped `vitest` `^2.1.0` → `^4.1.8`, resolving three Dependabot
|
|
27
|
+
alerts in the test toolchain (vitest UI file read/execute — critical; vite path
|
|
28
|
+
traversal and esbuild dev-server exposure — moderate). All are devDependencies
|
|
29
|
+
and do not ship to consumers.
|
|
30
|
+
|
|
10
31
|
## [0.6.1] - 2026-06-04
|
|
11
32
|
|
|
12
33
|
First release published to npm.
|
|
@@ -87,6 +108,8 @@ The connector is now **dual-protocol**: every tool runs against an abstract back
|
|
|
87
108
|
- User tools gained explicit PII-access assertions.
|
|
88
109
|
- Whole tree lint-clean (`npm run lint`) with object-injection sinks rewritten to safe lookups.
|
|
89
110
|
|
|
111
|
+
[0.7.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v0.7.0
|
|
112
|
+
[0.6.1]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v0.6.1
|
|
90
113
|
[0.6.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v0.6.0
|
|
91
114
|
[0.5.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v0.5.0
|
|
92
115
|
[0.4.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v0.4.0
|
package/README.md
CHANGED
|
@@ -7,7 +7,7 @@
|
|
|
7
7
|
[](https://drupal.org)
|
|
8
8
|
[](https://modelcontextprotocol.io)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Built by **Jeremy Michael Cerda** (jmcerda@wilkesliberty.com). Maintained by [Wilkes & Liberty, LLC](https://github.com/Wilkes-Liberty).
|
|
11
11
|
|
|
12
12
|
---
|
|
13
13
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "drupal-mcp-connector",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.7.0",
|
|
4
4
|
"description": "A secure, multi-site Model Context Protocol (MCP) connector for Drupal — dual-protocol JSON:API and GraphQL.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "src/index.js",
|
|
@@ -40,18 +40,18 @@
|
|
|
40
40
|
"Wilkes & Liberty, LLC <opensource@wilkesliberty.com> (https://wilkesliberty.com)"
|
|
41
41
|
],
|
|
42
42
|
"engines": {
|
|
43
|
-
"node": ">=
|
|
43
|
+
"node": ">=20.0.0"
|
|
44
44
|
},
|
|
45
45
|
"scripts": {
|
|
46
|
-
"start":
|
|
47
|
-
"start:https":
|
|
48
|
-
"start:dev":
|
|
49
|
-
"lint":
|
|
50
|
-
"lint:fix":
|
|
51
|
-
"test":
|
|
52
|
-
"test:watch":
|
|
53
|
-
"audit":
|
|
54
|
-
"check":
|
|
46
|
+
"start": "node src/index.js",
|
|
47
|
+
"start:https": "MCP_TRANSPORT=https node src/index.js",
|
|
48
|
+
"start:dev": "MCP_TRANSPORT=https MCP_ALLOW_HTTP=1 MCP_PORT=3443 node src/index.js",
|
|
49
|
+
"lint": "eslint src/",
|
|
50
|
+
"lint:fix": "eslint src/ --fix",
|
|
51
|
+
"test": "vitest run",
|
|
52
|
+
"test:watch": "vitest",
|
|
53
|
+
"audit": "npm audit --audit-level=high",
|
|
54
|
+
"check": "npm run lint && npm run audit",
|
|
55
55
|
"syntax-check": "for f in src/lib/*.js src/tools/*.js src/index.js; do node --input-type=module --check < $f && echo \"$f ✓\"; done"
|
|
56
56
|
},
|
|
57
57
|
"dependencies": {
|
|
@@ -65,6 +65,6 @@
|
|
|
65
65
|
"eslint-plugin-security": "^3.0.0",
|
|
66
66
|
"eslint-plugin-n": "^17.0.0",
|
|
67
67
|
"globals": "^15.0.0",
|
|
68
|
-
"vitest": "^
|
|
68
|
+
"vitest": "^4.1.8"
|
|
69
69
|
}
|
|
70
70
|
}
|