Release v0.10.0

CHANGELOG.md

@@ -1,5 +1,7 @@
 ## Unreleased
 
+## 0.10.0 - 2026-11-11
+
 ### Maintenance
 
 - **Security updates for dependencies (#151).** Clears the open Dependabot alerts, including the critical `proxy-addr` one. Most came from `@mcp-ui/server`, which depends on the v1 MCP SDK and through it Express: the refresh moves that SDK from 1.30.0 to 1.32.2, which brings `fast-uri` 3.1.9, `body-parser` 2.4.0, `proxy-addr` 2.0.8 and `hono` 4.13.17. The server itself runs on SDK v2, so the v1 HTTP code was installed but never handled requests. `npm audit --omit=dev` now finds nothing.

manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "@mapbox/mcp-devkit-server",
   "display_name": "Mapbox MCP DevKit Server",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Mapbox MCP devkit server",
   "author": {
     "name": "Mapbox, Inc."

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mapbox/mcp-devkit-server",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Mapbox MCP devkit server",
   "mcpName": "io.github.mapbox/mcp-devkit-server",
   "main": "./dist/commonjs/index.js",

server.json

@@ -6,13 +6,13 @@
     "url": "https://github.com/mapbox/mcp-devkit-server",
     "source": "github"
   },
-  "version": "0.9.0",
+  "version": "0.10.0",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "runtimeHint": "npx",
-      "version": "0.9.0",
+      "version": "0.10.0",
       "identifier": "@mapbox/mcp-devkit-server",
       "transport": {
         "type": "stdio"