Added
- Fix SSRF and XSS in OAuth consent form (breaking)
(#748) - uat: Add ha_checks post-run verification and openai agent improvements
(#713) - Add ha_check_update_notes tool for pre-update impact review
(#595) - Include persistent notifications in ha_get_overview
(#642) - Add Nabu Casa and other generic remote access via webhook proxy
(#554) - Serve bundled HA skills as MCP resources
(#679)
Changed
- Always create PRs as draft, mark ready only on user request
(#723) - Restore detailed maintainer descriptions lost in revert
(01d744a) - Always create PRs as draft, mark ready only on user request
(63d57ae) - Clarify that the MCP URL appears in the add-on logs, not HA logs
(#714) - Add Home Assistant OS add-on to Quick Install section
(#715)
Fixed
- types: Add mypy type checking and fix 47 type errors
(#716) - Resolve entity areas through device registry in get_system_overview
(#729) - Use per-client credentials for WebSocket in OAuth mode
(#704) - Resolve script storage key from entity registry (#463)
(#593) - Webhook proxy Dockerfile COPY paths for Supervisor builds
(#725)
Internal Changes
Added
- ci: Add automatic label classification to issue triage bot
(#745)
Fixed
- ci: Inject GITHUB_TOKEN into HACS config for reliable E2E tests
(#718) - ci: Fix changelog extraction producing empty release notes
(#707)
Chores
- ci: Group GitHub Actions dependabot updates into a single PR
(#739) - deps: Update fastmcp from 3.0.2 to 3.1.0
(#717) - deps: Update ghcr.io/astral-sh/uv docker tag to v0.10.7
(#697) - deps: Bump svgo from 4.0.0 to 4.0.1 in /site
(#703) - addon: Publish version 6.7.2 [skip ci]
(0f92d3a)