What's Changed
Fixed
- Dashboard Authentication for API Calls (PR #426): Added auth headers to all 19 dashboard fetch calls across Manage, Analytics, Quality tabs + 8 backend endpoints
- Test Script Security Hardening (Issue #419, PR #427):
- Command Injection (HIGH): Quoted heredoc +
printf '%q'for safe path escaping - Database Corruption:
cp→sqlite3 .backupfor atomic, WAL-safe backups - Argument Injection: Added
--separators tosqlite3andrmcommands - Specific pkill: Narrowed from
"memory server"to"mcp_memory_service" - Cross-Platform Docs: Added platform-specific path table (macOS/Linux/Windows)
- Command Injection (HIGH): Quoted heredoc +
- Test Fix: Added auth dependency overrides to quality HTTP endpoint tests
Full Changelog: v10.7.0...v10.7.1