Releases

Published @buildinternet/releases-api-types@0.52.0 to npm from 2e9afb6cbd60b58b951f013fa622b8789a5ae482.

A new publish-changelog GitHub Action diffs a changelog file on each push, maps changed sections onto upserted releases, and posts them to your Releases Index source, with re-runs of the same commit as no-ops. Sources that silently stopped polling now self-heal via the hourly heartbeat, and release cards no longer show pixelated avatar crops as inline media.

Dynamic Client Registration now issues self-registering OAuth clients (MCP tools, agent frameworks) at most identity and read scopes, as a public PKCE client with no client secret. Write and admin access remain limited to operator-provisioned first-party clients.

releases webhook add and edit now accept --format discord to deliver releases as formatted Discord embeds via a Discord incoming webhook URL. Human-readable webhook output redacts the delivery URL, while --json still includes it.

New releases admin recommendations notify-added command lets operators opt in to emailing a submitter that their suggested source was added to the registry.

Discord incoming webhook URLs can now be set as a delivery target, receiving release.created events as native Discord embeds alongside Slack and signed JSON. Workspace owners and admins can link an uploads.sh account, and the header search now opens an in-place typeahead with orgs, products, and sources instead of navigating on the first keystroke.

The product's primary name is now "Release Notes Index" across the homepage hero, header wordmark, OG metadata, and llms.txt, with "Releases Index" in page titles, footer, and emails; domain, API paths, and the CLI binary are unchanged. The MCP server's primary URL is now https://agents.releases.sh/mcp, with https://mcp.releases.sh/mcp remaining a working alias for existing tokens and client configs.

New releases changelog command prints recent product updates from releases.sh and links to https://releases.sh/updates. The same capability is exposed as the local MCP changelog tool.

Operators can now pick the AI model for each processing lane (summarize, extract, feed-enrich, marketing classifier) from OpenRouter's live catalog at /admin/models, without editing wrangler config or redeploying; changes take effect on the next AI call.

Source changelog routes such as /org/source were returning 500 errors sitewide and flagging as server errors in search-engine crawls; they now load correctly.

MCP clients can now complete OAuth authorization — resource-request validation and a column encoding bug were blocking scope grants — and sessions issue refresh tokens so clients stay connected past the one-hour expiry. The docs site adds how-to guides for locating changelog sources, converting changelogs to RSS/Atom feeds, and setting up release notifications.

OpenAPI spec now registers the error envelope as a named ErrorEnvelope component, replacing anonymous inline definitions so code generators and API tooling can reference the shape directly. Nonexistent API and docs paths return a text/markdown 404 body with pointers to llms.txt, the docs index, the REST API base, and the OpenAPI spec, and llms.txt gains a "When to use" section.

Generic MCP clients (MCPJam and similar) can now complete OAuth against the hosted MCP server — extra grant types are intersected rather than rejected, unrecognized scopes are dropped, and both the origin and /mcp path are accepted as valid resource identifiers. Follow tools that forward the caller's Bearer token to the REST API now work end-to-end.

API writes now support Idempotency-Key headers for token, API key, and webhook operations, returning the same response on retries within 24 hours. Rate limit errors use the standard structured error envelope with Retry-After and policy headers.

Hovering a link in a collection digest no longer underlines every link on the page simultaneously, and the current-week digest byline is now visually distinct. Wide docs tables scroll horizontally instead of overflowing onto the TOC rail, and the /docs/api/rest pagination table has been reformatted to fit properly.

Search timeframe filters open as a popover on the search bar, reused across org, source, and collection timeline views. Webhook settings use proper selects, and destructive actions open a confirmation dialog instead of a browser prompt.