Back to milestones

v0.2.3

Open

No due date

•Last updated Oct 28, 2026

Patch release after v0.2.2: filesystem-guard fixes (#451, #452), the non-idempotent native write replay bug (#475), supply-chain audit remediation (#476, #478, #479), and the test-coverage review (#469). No new features or tool-schema changes; features stay in v0.3.0.

57% complete

fix: return bad_request for local filesystem policy refusals
Unread
#461 opened Sep 30, 2026 · Updated Oct 6, 2026
2
fix: verify the opened filePath is inside B2_FILE_ROOT
Unread
#462 opened Oct 1, 2026 · Updated Oct 6, 2026
3
[b2-mcp] fs-guard: close the remaining check-then-use gaps under B2_FILE_ROOT
backblaze-labs/b2-mcp#451 · opened on Sep 24, 2026 · v0.2.3
[b2-mcp] fs-guard refusals return internal_error / HTTP 500 instead of bad_request / 400
backblaze-labs/b2-mcp#452 · opened on Sep 24, 2026 · v0.2.3
Review MCP tests against the shared B2 capability list and add the missing tests
backblaze-labs/b2-mcp#469 · opened on Oct 5, 2026 · v0.2.3
Non-idempotent native writes are replayed after an ambiguous failure under the shipped retry settings
backblaze-labs/b2-mcp#475 · opened on Oct 6, 2026 · v0.2.3
supply-chain audit fails on main: new npm advisories (1 critical)
backblaze-labs/b2-mcp#476 · opened on Oct 6, 2026 · v0.2.3
Decide how to handle the braces advisory (GHSA-vfj7-8cjw-p6xm): no fixed release on npm
backblaze-labs/b2-mcp#478 · opened on Oct 6, 2026 · v0.2.3
Decide how to handle the node-forge advisory (GHSA-86w9-cpqp-85rv): no fixed release on npm
backblaze-labs/b2-mcp#479 · opened on Oct 6, 2026 · v0.2.3
Adopt the AI-native SDLC playbook (intent/, CLAUDE.md, skills, hooks, evals, review)
backblaze-labs/b2-mcp#528 · opened on Oct 28, 2026 · v0.2.3
chore: adopt the AI-native SDLC playbook and changie
Unread
#529 opened Oct 28, 2026 · Updated Oct 28, 2026Draft
41