drupal-mcp-connector 2.2.1 → 2.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +22 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,28 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [2.2.2] - 2026-08-12
|
|
11
|
+
|
|
12
|
+
### Security
|
|
13
|
+
- Bump `hono` to 4.13.1, `ip-address` to 10.5.0, and `fast-uri` to 3.1.5,
|
|
14
|
+
closing eight npm advisories (GHSA-mwp4-54f8-5fhr, GHSA-4xrf-jv44-h6hh,
|
|
15
|
+
GHSA-22jq-vg5j-6vgg, GHSA-7p8r-x3mc-p8w7, GHSA-8j4g-w8fx-2239,
|
|
16
|
+
GHSA-f23p-vx2j-j53r, GHSA-79qm-7rj5-m7r9, GHSA-54fx-42gc-7vw4). Lockfile-only
|
|
17
|
+
bumps within existing ranges; `npm audit` reports 0 vulnerabilities (#173).
|
|
18
|
+
|
|
19
|
+
### Changed
|
|
20
|
+
|
|
21
|
+
- **CI: the attribution check is now the shared workflow.**
|
|
22
|
+
`.github/workflows/attribution.yml` becomes a thin caller pinned to
|
|
23
|
+
`Wilkes-Liberty/shared-ci@v1`, and the vendored `.github/scripts/` copies are
|
|
24
|
+
removed. One implementation for every repository makes copy drift structurally
|
|
25
|
+
impossible instead of merely detectable.
|
|
26
|
+
- **CI: the changelog gate is required-by-default again.** The brief conversion
|
|
27
|
+
to the org's opt-in model is reverted: this package's CHANGELOG ships as a
|
|
28
|
+
published artifact, so an entry is the default and trivial PRs opt out with
|
|
29
|
+
the `no-changelog` label. The conversion's hardening is kept — fixed-string
|
|
30
|
+
match, checkout skipped on bypassed PRs, Dependabot exempt.
|
|
31
|
+
|
|
10
32
|
## [2.2.1] - 2026-08-02
|
|
11
33
|
|
|
12
34
|
### Fixed
|
package/package.json
CHANGED