Skip to content

Releases: grainulation/wheat

v1.1.8

Choose a tag to compare

@github-actions github-actions released this 20 Apr 04:54

Automated release for v1.1.8

v1.1.7

Choose a tag to compare

@github-actions github-actions released this 19 Apr 21:01

Automated release for v1.1.7

v1.1.6

Choose a tag to compare

@github-actions github-actions released this 19 Apr 18:24

Automated release for v1.1.6

v1.1.5

Choose a tag to compare

@github-actions github-actions released this 19 Apr 06:31

Automated release for v1.1.5

v1.1.0 — Security Hardening

Choose a tag to compare

@aid-ninja aid-ninja released this 11 Apr 21:11

Security

  • MCP directory containmentdir parameter now validated against workspace root with path.sep prefix check. Prevents path traversal to arbitrary directories.
  • CSP meta tag — Content Security Policy added to landing page.
  • Gitignore — Added .farmer-token, .farmer-state.json, .farmer.pid, .farmer-audit*.jsonl, .claude/.

What's included

The wheat MCP server is the core engine for evidence-tracked research sprints. This release hardens the tools/call handler to reject directory parameters outside the workspace boundary.

Full changelog: v1.0.0...v1.1.0