jlxq0/carddav-mcp
1
0
Fork 0
Code Issues 6 Pull requests 1 Projects Releases 4 Packages 1 Wiki Activity Actions
4 releases 7 tags
  • v0.1.2 e5bd505b2c

    carddav-mcp v0.1.2
    All checks were successful
    CI / docker (push) Successful in 36s
    Details
    CI / cargo (push) Successful in 54s
    Details
    Stable

    jlxq0 released this 2026-08-19 07:35:37 +00:00 | 47 commits to main since this release

    Security and open-source readiness release.

    Highlights:

    • bounds public MCP request bodies and identity-keyed in-memory state;
    • coalesces and rate-limits unknown-key JWKS refreshes;
    • restores OAuth token anti-caching headers and requires HTTPS for public dependencies;
    • adds Claude Desktop and Cowork callbacks, self-hosting docs, Compose/Kubernetes examples, and contributor/security policies;
    • ships a scanned Linux/AMD64 non-root image with SLSA provenance and SPDX SBOM attestations.

    Container:
    forge.oddie.app/jlxq0/carddav-mcp:v0.1.2@sha256:5ea11aa76eaf4a97a18a4185d96bfb1e51ff8b9e7270a4942968d58022a236ae

    Attached CycloneDX SBOM SHA-256:
    56e4f72e8ebe6a28b6d938aff78de35c375803a7a79f4036319185c612c05b63

    The v0.1.1 source tag was superseded before container publication because its release workflow used a Buildx-only flag with standalone buildctl.

    Downloads