release: version 2.4.0 - fix ci/cd, update changelog and agents guide

Author: CakeRepository

.github/workflows/ci.yml

@@ -2,9 +2,9 @@ name: CI
 
 on:
   push:
-    branches: [main]
+    branches: [master]
   pull_request:
-    branches: [main]
+    branches: [master]
 
 permissions:
   contents: read

CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.4.0] - 2026-03-15
+
+### Fixed
+
+- **Server version alignment** — Fixed a mismatch where the runtime MCP server reported a different version than `package.json`.
+- **Security: SDK upgrade** — Upgraded `@modelcontextprotocol/sdk` to v1.26.0 to address GHSA-345p-7cg4-v4c7.
+
+### Added
+
+- **Agents guide** — Created `agents.md` with instructions for publishing and managing the server.
+
+### Changed
+
+- **CI/CD Pipeline** — Updated GitHub Actions to correctly target the `master` branch.
+
 ## [2.0.0] - 2026-02-06
 
 ### Added

agents.md

@@ -0,0 +1,63 @@
+# Publishing Guide for Agents
+
+This document outlines the steps for building, versioning, and publishing the `@takescake/1password-mcp` server.
+
+## Versioning
+
+We adhere to [Semantic Versioning](https://semver.org/).
+- **Patch** (2.4.x): Bug fixes and minor security updates.
+- **Minor** (2.x.0): New tools, prompts, or non-breaking features.
+- **Major** (x.0.0): Breaking changes to the MCP tool schemas or core architecture.
+
+When bumping the version, ensure it is updated in the following locations:
+1. `package.json`
+2. `server.json`
+3. `src/config.ts` (the `SERVER_VERSION` constant)
+4. `CHANGELOG.md`
+
+## Build and Validation
+
+Before publishing, always run the full validation suite:
+
+```bash
+# Clean previous builds
+npm run clean
+
+# Install fresh dependencies
+npm ci
+
+# Type-check, build, and run tests
+npm run build
+npm run lint
+npm test
+```
+
+## Publishing to npm
+
+### Automated (Recommended)
+
+1. Create a new GitHub Release on the `master` branch.
+2. The `publish.yml` workflow will automatically trigger, build, test, and publish to npm.
+3. Ensure the `NPM_TOKEN` is configured in GitHub Secrets.
+
+### Manual
+
+If manual publishing is required:
+
+```bash
+npm login
+npm publish --access public
+```
+
+*Note: The `prepublishOnly` script in `package.json` will automatically run `clean`, `build`, and `test` before the package is uploaded.*
+
+## Configuration Variables
+
+- `OP_SERVICE_ACCOUNT_TOKEN`: **Required.** The service account token for 1Password.
+- `OP_INTEGRATION_NAME`: (Optional) Defaults to `1password-mcp`.
+- `OP_INTEGRATION_VERSION`: (Optional) Defaults to the current `SERVER_VERSION`.
+- `MCP_LOG_LEVEL`: (Optional) `debug`, `info`, `warn`, `error`. Defaults to `info`.
+
+## CI/CD Pipeline
+
+The CI pipeline (`ci.yml`) runs on every push and pull request to the `master` branch. It validates the build across Node.js 18, 20, and 22.

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@takescake/1password-mcp",
-  "version": "2.0.3",
+  "version": "2.4.0",
   "private": false,
   "type": "module",
   "description": "MCP server for 1Password service accounts — tools, prompts, and resources for vault and credential management",

package.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/CakeRepository/1Password-MCP.git",
     "source": "github"
   },
-  "version": "2.0.3",
+  "version": "2.4.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@takescake/1password-mcp",
-      "version": "2.0.3",
+      "version": "2.4.0",
       "transport": {
         "type": "stdio"
       },

server.json

@@ -5,7 +5,7 @@
 import { LOG_LEVEL_VALUES, type LogLevel } from "./types.js";
 
 export const SERVER_NAME = "1password-mcp";
-export const SERVER_VERSION = "2.0.3";
+export const SERVER_VERSION = "2.4.0";
 
 /** Parse a `--flag value` or `--flag=value` argument from process.argv. */
 function getArgValue(name: string): string | undefined {