What's Changed

• chore(deps): update python-dotenv requirement from >=1.0.0 to >=1.2.2 by @dependabot[bot] in #60
• fix(server): shorten description to comply with MCP Registry 100-char limit by @olsigjecii in #64
• Docs/cursor marketplace and playwright mcp by @olsigjecii in #70
• chore(ci): bump actions/checkout from 6 to 7 by @dependabot[bot] in #71
• fix: SSRF protection for API-target schema URL fetches (DAST-1173) by @andreprobely in #75
• feat: dual-path browser automation for web target onboarding by @olsigjecii in #74
• chore: sync versions and restore install guide coherence by @olsigjecii in #72
• chore(ci): bump actions/github-script from 8 to 9 by @dependabot[bot] in #58
• chore(ci): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #59
• chore(ci): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #66
• feat: support secret references for the API key (DAST-1176) by @andreprobely in #77
• fix: bound caller-supplied input size before parsing (DAST-1181) by @andreprobely in #80
• chore: release v1.2.0 — security fixes, browser automation, and secret key support by @cursor[bot] in #85

New Contributors

• @cursor[bot] made their first contribution in #85

Full Changelog: v1.1.3...v1.2.0