🎉 Release v0.22.4
📦 Docker Images
# Docker Hub
docker pull agigante80/actual-mcp-server:0.22.4
# GitHub Container Registry
docker pull ghcr.io/agigante80/actual-mcp-server:0.22.4📝 Changelog
- chore(release): bump version to 0.22.4 (941483c)
- feat(auth): Cloudflare Access assertion mode: validate Cf-Access-Jwt-Assertion with a direct JWKS URI (#462) (16bae61)
- chore(release): bump version to 0.22.3 (3c750ef)
- fix(auth): strip the decoded token payload from the 401 cause outside production (#463) (abedf77)
- chore(release): bump version to 0.22.2 (17d4598)
- fix(auth): OIDC_RESOURCE is the canonical MCP URL: validate it, document it, warn on the origin form (#461) (7a3a0ee)
- ci: guards skip absent local-only assistant files loudly instead of failing (309ca13)
- Allow the benign historical hits the purge left visible (9473c9f)
- Drop the old checkout root from a comment (8d062b3)
- Remove private project names and home paths (bf4f3ee)
- Install the leak guard (30bee02)
- Stop publishing AI-assistant files (1b12ae9)
- docs(test): record why the 5s bound wait is deliberate (#455, closed not-planned) (0766c4b)
📊 What this release ships
@actual-app/apipinned at26.9.0- All 81 MCP tools registered and validated on this tag
🔒 Security
This release has been scanned for vulnerabilities. Check the Security tab for details.
Full Changelog: v0.22.1...v0.22.4