Skip to content

Commit b9d1d71

Browse files
salacosteclaude
andcommitted
chore: bump version to 0.9.3 with security fix
Security Release: - Fixed critical security issue from 0.9.2 (exposed API key) - Removed log files from npm package - Updated changelog to document security fix ⚠️ IMPORTANT: Versions 0.9.1 and 0.9.2 were unpublished due to security issue 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
1 parent aac501f commit b9d1d71

File tree

3 files changed

+39
-3
lines changed

3 files changed

+39
-3
lines changed

CHANGELOG.md

Lines changed: 19 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,25 @@ All notable changes to the n8n Workflow Builder MCP Server will be documented in
55
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
66
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
77

8-
## [0.9.2] - 2025-12-27
8+
## [0.9.3] - 2025-12-27
9+
10+
### Security Fix 🔒
11+
**CRITICAL: Removed sensitive log files from npm package**
12+
13+
### Fixed
14+
- **SECURITY**: Prevented `server.log` and other log files from being published to npm
15+
- **SECURITY**: Added `*.log` to `.npmignore` to block all log files
16+
- **SECURITY**: Unpublished versions 0.9.1 and 0.9.2 that contained sensitive data
17+
18+
### Changed
19+
- **Package size reduced** - 653.2 KB (down from 699 KB) by excluding log files
20+
- **File count reduced** - 200 files (down from 201)
21+
22+
⚠️ **IMPORTANT**: If you downloaded version 0.9.1 or 0.9.2, please rotate your n8n API key immediately as it may have been exposed.
23+
24+
## [0.9.2] - 2025-12-27 [YANKED]
25+
26+
**⚠️ This version was unpublished due to security issue (exposed API key in server.log)**
927

1028
### Documentation & Discoverability
1129
**Enhanced npm package metadata and documentation integration**

docs/about/changelog.md

Lines changed: 19 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,25 @@ All notable changes to the n8n Workflow Builder MCP Server will be documented in
55
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
66
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
77

8-
## [0.9.2] - 2025-12-27
8+
## [0.9.3] - 2025-12-27
9+
10+
### Security Fix 🔒
11+
**CRITICAL: Removed sensitive log files from npm package**
12+
13+
### Fixed
14+
- **SECURITY**: Prevented `server.log` and other log files from being published to npm
15+
- **SECURITY**: Added `*.log` to `.npmignore` to block all log files
16+
- **SECURITY**: Unpublished versions 0.9.1 and 0.9.2 that contained sensitive data
17+
18+
### Changed
19+
- **Package size reduced** - 653.2 KB (down from 699 KB) by excluding log files
20+
- **File count reduced** - 200 files (down from 201)
21+
22+
⚠️ **IMPORTANT**: If you downloaded version 0.9.1 or 0.9.2, please rotate your n8n API key immediately as it may have been exposed.
23+
24+
## [0.9.2] - 2025-12-27 [YANKED]
25+
26+
**⚠️ This version was unpublished due to security issue (exposed API key in server.log)**
927

1028
### Documentation & Discoverability
1129
**Enhanced npm package metadata and documentation integration**

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@kernel.salacoste/n8n-workflow-builder",
3-
"version": "0.9.2",
3+
"version": "0.9.3",
44
"description": "AI-powered n8n workflow management via Model Context Protocol (MCP). Create, manage, and monitor workflows through natural language with Claude AI. Multi-instance support with comprehensive documentation.",
55
"scripts": {
66
"clean": "rm -rf build",

0 commit comments

Comments
 (0)