-
SummerCMS v0.5.2
jakub released this
2026-10-28 15:38:14 +00:00 | 237 commits to master since this releaseMCP OAuth can advertise the scopes a plugin declares, and a tool call can
read which MCP subject invoked it. Form extensions and record events from
v0.5.1 keep the behaviour closed in review: hidden fields stay closed,
required extension fields are checked on the extension's own value, and
record events cover child writes with a normalised locale.Added
- pact: MemberTokenScopeCatalog, MCPAdvertisedScopes and MCPCall. An empty
MCP scope list still resolves to the five fixed names, including backend.
pier copies an advertised list onto the protected-resource document and
sets MCPCall on each tool call, next to the dispatch credential. - A pending consent view exposes whether offline access was requested.
IssueCode's signature is unchanged.
Fixed
- A hidden relation or partial field no longer keeps its routes.
- Record events fire for hasMany link, unlink and deferred children, and
Locale is the request locale's primary tag. - Widget actions dispatched while the widget connects are delivered.
- A field-type upload follows the form extension's visibility.
- A required field in a form extension is checked on the lifted value, not
as a rule on the owner model. - The additive API check compares with the previous release after HEAD is
tagged.
Downloads
- pact: MemberTokenScopeCatalog, MCPAdvertisedScopes and MCPCall. An empty