This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Summary
AI summaryMinor fixes and improvements.
Full changelog
What's new
Test-only release. Runtime is byte-identical to 1.5.2 — the version bump is so the new handler-level integration suite has a checkpoint on npm.
Tests
Handler-level integration test suite — 72 new tests covering every registered MCP tool via Client + McpServer linked by an InMemoryTransport pair. Tests exercise tool handlers through the real MCP protocol:
- Zod schema validation (empty strings, bad date formats, invalid color codes)
- JSON-string argument parsing (
create_note.frontmatter,update_frontmatter.properties) - Malformed-JSON error paths returning
isError: truerather than throwing ensureMdExtensionnormalization across all 7 write tools- Canvas file-reference traversal-rejection (e.g.
../../../etc/passwdblocked) - The parallelized
search_by_frontmatterrewrite shipped in 1.5.1 finally has handler-level coverage - Error response shape across every tool (no absolute paths leak;
isErrorflag correct)
Lives under src/__tests__/handlers/ with a shared harness that spins up a fixture vault per test.
Suite totals: 254 tests, up from 182. No production code touched.
Upgrade: not required. npm install [email protected] if you want the latest tag, but functionally equivalent to 1.5.2. See CHANGELOG.md for full history.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About rps321321/obsidian-mcp-pro
Feature-complete Obsidian vault MCP server with 23 tools and 3 resources. Full-text search, note CRUD, frontmatter queries, tag management, backlinks, graph traversal (BFS up to 5 hops), orphan/broken link detection, and canvas support. Auto-detects vault, path traversal protection, MIT licensed.
Related context
Beta — feedback welcome: [email protected]