This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Affected surfaces
ReleasePort's take
Light signalGoogle Calendar API v1.3.0 adds read‑only CSV collections via DuckDB and enables event management on any listed calendar, including color metadata.
Why it matters: The new CSV data source integration (DuckDB) expands query capabilities for Collections API users; re‑linking is required to grant the minimal `calendar.calendarlist.readonly` scope before accessing enhanced features.
Summary
AI summaryGoogle Calendar now supports listing and managing non‑primary calendars with colour metadata, requiring users to re‑link for a new minimal scope.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds ability to list all Google calendars including secondary and shared. Adds ability to list all Google calendars including secondary and shared. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Feature | Medium |
Adds read‑only CSV data source collections backed by DuckDB with structured query DSL. Adds read‑only CSV data source collections backed by DuckDB with structured query DSL. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Feature | Low |
Enables reading or creating events on any listed Google calendar via `calendarId`. Enables reading or creating events on any listed Google calendar via `calendarId`. Source: granite4.1:30b@2026-07-18-audit Confidence: low |
— |
| Feature | Low |
Provides event and calendar color information (`colorId`, hex values). Provides event and calendar color information (`colorId`, hex values). Source: granite4.1:30b@2026-07-18-audit Confidence: low |
— |
| Feature | Low |
Requires re-linking for existing users to grant new `calendar.calendarlist.readonly` scope. Requires re-linking for existing users to grant new `calendar.calendarlist.readonly` scope. Source: granite4.1:30b@2026-07-18-audit Confidence: low |
— |
| Dependency | Low |
Updates dependencies: @mulmoclaude/[email protected], @mulmoclaude/[email protected], @mulmoclaude/[email protected]. Updates dependencies: @mulmoclaude/[email protected], @mulmoclaude/[email protected], @mulmoclaude/[email protected]. Source: llm_adapter@2026-07-18 Confidence: high |
— |
Full changelog
Highlights
Google Calendar — non-primary calendars & colours (#2162, #2164)
The google tool can now list the calendars you've added or subscribed to — primary, secondary, and shared — with calendarListCalendars, and read or create events on any of them by passing calendarId (default: your primary). Colours come through too: every event carries its colorId, each calendar its background/foreground hex, and calendarColors resolves the palette. Calendar listing follows pagination, so accounts with many calendars aren't truncated.
Adds one minimal scope, calendar.calendarlist.readonly. Existing users must re-link (Settings → Plugins → Google) to grant it. Reading events on a known calendar id needs no re-link.
Collections — CSV dataSource via DuckDB (#2158, #2163)
Read-only collections backed by a CSV file, queried through DuckDB with a structured aggregation query DSL (queryItems).
Ships @mulmoclaude/[email protected], @mulmoclaude/[email protected], @mulmoclaude/[email protected].
Full Changelog
See CHANGELOG.md.
Breaking Changes
- Existing users must re‑link their Google account to grant the new `calendar.calendarlist.readonly` scope.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About MulmoClaude
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]