This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryBare AC IDs with non-hex suffixes now resolve correctly.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
`get_story` gains optional `include_notes=false` to omit notes section. `get_story` gains optional `include_notes=false` to omit notes section. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
`bulk_update_acceptance_criteria` no longer echoes full file content in response. `bulk_update_acceptance_criteria` no longer echoes full file content in response. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
`bulk_update_acceptance_criteria` and `check_acceptance_criterion` now correctly resolve AC IDs with non‑hex suffixes. `bulk_update_acceptance_criteria` and `check_acceptance_criterion` now correctly resolve AC IDs with non‑hex suffixes. Source: llm_adapter@2026-07-16 Confidence: high |
— |
Full changelog
What's new since v1.1.2
get_story: optional include_notes parameter
Set include_notes=false to omit the ## Notes section (and everything after it) from the returned content. Story files only grow over time — every add_story_note and complete_story call appends a timestamped note, and nothing ever trims it — so a heavily-annotated, long-lived story can carry a lot of accumulated history that a caller doesn't always need. Defaults to true; existing callers see no change.
bulk_update_acceptance_criteria no longer echoes file content
The response no longer includes the full post-update file content — it now returns {story_id, path, criteria_updated, errors}. The criteria_updated/errors pair was already sufficient signal; callers who want to see the resulting file should call get_story explicitly. Both of these changes were flagged from a real dogfood session where repeated calls made up a disproportionate share of the session's token spend.
Bug fix: bare AC IDs with non-hex suffixes now resolve correctly
bulk_update_acceptance_criteria and check_acceptance_criterion previously only recognised AC IDs with an 8-character hex suffix (e.g. AC-STORY-042-a3f9b2c1). Stories whose acceptance criteria were hand-authored with plain sequential IDs instead (e.g. AC-STORY-159-1, AC-STORY-159-2, ...) — most commonly when an external tool or agent writes AC lines directly to markdown rather than going through set_acceptance_criteria — would fail lookup for every criterion with "criterion/criteria not found", even though the same call worked fine for hex-suffixed stories. The ID regex now accepts any-length hex suffix, so both formats resolve.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About corbym/backlog-mcp
MCP server that gives AI agents structured read/write access to a story-based project backlog. Agents can list stories, read content, update status, and append notes — all backed by plain markdown files versioned in your repository.
Related context
Beta — feedback welcome: [email protected]