v1.0.0-rc.2 Release Candidate

SECURITY:

• A security vulnerability was detected in versions until v1.0.0-rc.1. Currently, no exploitation is known and an analysis of the related code indicates that the vulnerability cannot be exploited. However, following general security considerations - it is recommended to upgrade to version v1.0.0-rc.2 or later
• All read operations with MCP enforce privacy settings in order to prevent AI access to living individuals' data. If the privacy settings for a tree do not fulfill certain minimum requirements, read access is denied.

Scopes:

• Modified API scopes: Substituted api_read by api_read_privacy and api_read_user (see scope table in Readme chapter)
• Modified MCP scopes: Substituted mcp_read by mcp_read_privacy (see scope table in Readme chapter)

Access Tokens:

• Added 1 day and 3 months as expiration intervals for access tokens

Translation:

• Added Catalan, Danish, Dutch, German, and Spanish

Bugfixes:

• Wrong birth and death dates for linked INDI in GetRecord
• Removed unnecesary escapes from filename RegExp in MCP tool

Upgrading from earlier versions:

• To upgrade from earlier versions, it is recommended to delete earlier versions of the custom module and remove its settings in the control panel (after reloading the "all modules" view).
• Clients and access tokens, which are related to the changed scopes (see description above), might not work any more after upgrade

v1.0.0-rc.1 Release Candidate

Added example scripts for bash and Python