smart-web-mcp 1.6.25 → 1.6.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +8 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,7 @@ All notable changes to this project will be documented in this file.
|
|
|
5
5
|
The format is based on Keep a Changelog[^1] and this project uses SemVer.
|
|
6
6
|
|
|
7
7
|
## Unreleased
|
|
8
|
+
* Authenticate to the MCP Registry only after the exact npm version becomes visible. Metadata validation stays unauthenticated; the short-lived OIDC credential no longer ages during propagation and can be obtained afresh on an immutable-tag recovery run.
|
|
8
9
|
* Recover a requested numeric comment permalink when an owned discussion row keeps its canonical ID on a nested element rather than the outer render wrapper. Require one unambiguous inner identity and its own body; retain parent links and declared-versus-delivered coverage. A measured public thread changes from zero structured comments to four source-bound replies through approved-browser continuation; absent and ambiguous IDs remain partial.
|
|
9
10
|
* Treat a numeric generic `#comment-`, `#discussioncomment-`, `#post-` or Lobsters-style `#c_` reply permalink as a request for that exact source-bound comment even without a separate comments flag. Missing rows remain partial; ordinary section fragments and non-generic providers keep their existing behavior.
|
|
10
11
|
* Continue a requested generic reply permalink once in the approved owned browser when the direct page reports a complete discussion count but omits that exact reply. Accept only same-identity browser evidence containing the requested row and preserving previously bound rows/counts; an absent row remains partial. This guards a fault-injected delayed-reply case, not a claim of live recovery on every site.
|
|
@@ -436,6 +437,13 @@ The format is based on Keep a Changelog[^1] and this project uses SemVer.
|
|
|
436
437
|
- Korean public API helpers now validate outbound URLs and redirects before fetching, blocking localhost, private, and reserved targets unless `network.allowPrivateHosts` is explicitly enabled.
|
|
437
438
|
- CI now declares read-only default repository permissions, Dependabot auto-merge pins the reusable workflow without forwarding all caller secrets, and the workflow check enforces those guards.
|
|
438
439
|
|
|
440
|
+
## [1.6.26](https://github.com/jojo-labs/smart-web/compare/v1.6.25...v1.6.26) (2026-10-04)
|
|
441
|
+
|
|
442
|
+
|
|
443
|
+
### Bug Fixes
|
|
444
|
+
|
|
445
|
+
* refresh MCP Registry OIDC after npm propagation ([#791](https://github.com/jojo-labs/smart-web/issues/791)) ([8ae9288](https://github.com/jojo-labs/smart-web/commit/8ae928877df442868eabd915676fe2ed279b3f00))
|
|
446
|
+
|
|
439
447
|
## [1.6.25](https://github.com/jojo-labs/smart-web/compare/v1.6.24...v1.6.25) (2026-10-04)
|
|
440
448
|
|
|
441
449
|
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "smart-web-mcp",
|
|
3
3
|
"mcpName": "io.github.jojo-labs/smart-web",
|
|
4
|
-
"version": "1.6.
|
|
4
|
+
"version": "1.6.26",
|
|
5
5
|
"packageManager": "npm@11.9.0",
|
|
6
6
|
"description": "Local MCP for web search, direct-URL fetch, site crawling, docs export, and bounded smartbrowser local browser actions.",
|
|
7
7
|
"homepage": "https://github.com/jojo-labs/smart-web",
|