This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryMinor fixes and improvements.
Full changelog
What's Changed
- deps-dev(deps-dev): bump sitemap from 8.0.0 to 8.0.2 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/50
- deps-dev(deps-dev): bump sax from 1.4.1 to 1.4.3 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/45
- deps(deps): bump the linting group with 9 updates by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/43
- deps(deps): bump get-tsconfig from 4.10.1 to 4.13.0 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/52
- deps-dev(deps-dev): bump @ecies/ciphers from 0.2.4 to 0.2.5 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/51
- deps-dev(deps-dev): bump unist-util-is from 6.0.0 to 6.0.1 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/48
- deps-dev(deps-dev): bump @emnapi/runtime from 1.5.0 to 1.7.1 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/47
- deps-dev(deps-dev): bump unist-util-visit-parents from 6.0.1 to 6.0.2 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/46
- deps-dev(deps-dev): bump eciesjs from 0.4.15 to 0.4.16 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/49
- deps(deps): bump the build-tools group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/53
- ci(deps): bump actions/setup-node from 4 to 6 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/54
- ci(deps): bump actions/upload-pages-artifact from 3 to 4 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/55
- ci(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/56
- ci(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/57
- ci(deps): bump actions/configure-pages from 4 to 5 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/58
- deps-dev(deps-dev): bump jsdom from 27.0.1 to 27.4.0 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/59
- ci(deps): bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in https://github.com/cameronrye/activitypub-mcp/pull/60
Full Changelog: https://github.com/cameronrye/activitypub-mcp/compare/v1.0.3...v1.1.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About cameronrye/activitypub-mcp
A comprehensive MCP server that enables LLMs to explore and interact with the Fediverse through ActivityPub protocol. Features WebFinger discovery, timeline fetching, instance exploration, and cross-platform support for Mastodon, Pleroma, Misskey, and other ActivityPub servers.
Related context
Related tools
Earlier breaking changes
- v2.1.0 `activitypub://instance-info/{domain}` `software` field now an object instead of a string.
- v2.1.0 Removed `activitypub://post-thread/{postUrl}` URI form; use `{domain}/{statusId}` instead.
- v2.0.0 'get-relationship' no longer accepts legacy `accountIds` array; requires single `acct` string.
- v2.0.0 `MCP_HTTP_CORS_ORIGINS` no longer defaults to '*'; must be set explicitly.
- v2.0.0 `scheduledId` renamed to `scheduledPostId` in scheduling tools.
Beta — feedback welcome: [email protected]