0 Releases 48 Tags

RSS Feed

• v0.6.2 ef47baf0a1

  Compare

  SummerCMS v0.6.2: safer upload serving, MCP connectors that also read OIDC discovery

  jakub released this 2026-11-06 13:40:05 +00:00 | 10 commits to master since this release

  Uploaded files keep the disposition they were stored with when served,
  code that writes uploads itself can store them the same way, and MCP
  clients that mix OIDC scopes into their authorize request can connect.

  Added

  • attach.UploadWriterOptions: the blob writer options attach.Store uses,
    for code that writes an upload to the bucket itself.

  Changed

  • attach.StaticHandler and StaticHandlerPublic send
    X-Content-Type-Options: nosniff on every response and the
    Content-Disposition stored with the blob; a malformed stored value is
    sent as attachment.

  Fixed

  • The MCP authorize endpoint drops openid, profile and email from the
    requested scope instead of refusing the request with invalid_scope.
    They are never granted and no ID token is issued; any other unknown
    scope is still refused.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)