This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryFixed CI notification failure, updated dependencies across deps, CI, and calendar modules, and added configurable OAuth audience and timezone override with a new calendar event update action.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Add update action to manage‑event for calendar operations. Add update action to manage‑event for calendar operations. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Make DEFAULT_TIMEZONE overridable via environment variable. Make DEFAULT_TIMEZONE overridable via environment variable. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Feature | Medium |
Allow configurable OAuth audience via OUTLOOK_AUTH_AUDIENCE environment variable. Allow configurable OAuth audience via OUTLOOK_AUTH_AUDIENCE environment variable. Source: granite4.1:30b@2026-05-26-audit Confidence: low |
— |
| Dependency | Medium |
Bump MCP SDK from 1.27.1 to 1.29.0 to clear npm audit failures. Bump MCP SDK from 1.27.1 to 1.29.0 to clear npm audit failures. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Dependency | Low |
Bump globals from 17.5.0 to 17.6.0. Bump globals from 17.5.0 to 17.6.0. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Dependency | Low |
Bump @modelcontextprotocol/inspector from 0.21.1 to 0.21.2. Bump @modelcontextprotocol/inspector from 0.21.1 to 0.21.2. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Dependency | Low |
Update dev‑dependencies across one directory with three updates. Update dev‑dependencies across one directory with three updates. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Dependency | Low |
Bump actions/setup-node from 6.3.0 to 6.4.0. Bump actions/setup-node from 6.3.0 to 6.4.0. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Dependency | Low |
Bump anthropics/claude-code-action from 1.0.93 to 1.0.112. Bump anthropics/claude-code-action from 1.0.93 to 1.0.112. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Dependency | Low |
Bump github/codeql-action from 4.35.1 to 4.35.3. Bump github/codeql-action from 4.35.1 to 4.35.3. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Notify-website now fires on auto‑tagged releases. Notify-website now fires on auto‑tagged releases. Source: llm_adapter@2026-05-26 Confidence: high |
— |
Full changelog
What's Changed
- fix(ci): notify-website didn't fire on auto-tagged releases by @nathanschram in https://github.com/littlebearapps/outlook-assistant/pull/170
- chore(deps): bump globals from 17.5.0 to 17.6.0 by @dependabot[bot] in https://github.com/littlebearapps/outlook-assistant/pull/155
- chore(deps): bump @modelcontextprotocol/inspector from 0.21.1 to 0.21.2 by @dependabot[bot] in https://github.com/littlebearapps/outlook-assistant/pull/152
- chore(deps): bump the dev-dependencies group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/littlebearapps/outlook-assistant/pull/156
- chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/littlebearapps/outlook-assistant/pull/150
- chore(deps): bump anthropics/claude-code-action from 1.0.93 to 1.0.112 by @dependabot[bot] in https://github.com/littlebearapps/outlook-assistant/pull/157
- chore(deps): bump github/codeql-action from 4.35.1 to 4.35.3 by @dependabot[bot] in https://github.com/littlebearapps/outlook-assistant/pull/158
- fix(deps): bump MCP SDK 1.27.1 → 1.29.0 to clear pre-existing npm audit failure by @nathanschram in https://github.com/littlebearapps/outlook-assistant/pull/187
- feat(calendar): add update action to manage-event by @taranasus in https://github.com/littlebearapps/outlook-assistant/pull/173
- feat(config): make DEFAULT_TIMEZONE overridable via env var by @taranasus in https://github.com/littlebearapps/outlook-assistant/pull/175
- feat(auth): configurable OAuth audience via OUTLOOK_AUTH_AUDIENCE by @taranasus in https://github.com/littlebearapps/outlook-assistant/pull/174
- docs(readme): use absolute URLs for demo gif/mp4 so npm renders them by @nathanschram in https://github.com/littlebearapps/outlook-assistant/pull/171
- release(v3.8.0): manage-event update + audience/timezone overrides + community contributions by @nathanschram in https://github.com/littlebearapps/outlook-assistant/pull/188
New Contributors
- @taranasus made their first contribution in https://github.com/littlebearapps/outlook-assistant/pull/173
Full Changelog: https://github.com/littlebearapps/outlook-assistant/compare/v3.7.4...v3.8.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About littlebearapps/outlook-assistant
Ask your AI assistant to search your inbox, send emails, schedule meetings, manage contacts, and configure mailbox settings — without leaving the conversation. Works with Claude, Cursor, Windsurf, and any MCP-compatible client.
Related context
Beta — feedback welcome: [email protected]