• v2.0.5 518a489d62

    v2.0.5 Stable

    github-actions[bot] released this 2026-07-14 19:30:33 -07:00 | 24 commits to main since this release

    Kaimon v2.0.5

    Diff since v2.0.4

    Security & Claude Code compat patch.

    • Security: removed a localhost OAuth auto-mint that issued bearer tokens to anyone who could reach the port (auth bypass); Kaimon now accepts only configured API keys, and Origin validation rejects localhost-spoof hosts (e.g. localhost.evil.test).
    • Compat: OAuth/OIDC probe paths return a clean 404 with a JSON error body, so modern Claude Code no longer crashes on discovery and keyless clients get a clear "Missing API key".
    • Chore/CI: gitignore deploy artifacts; LinkCheck false-positive exclusion.
    Downloads