What's New in v1.6.0
Changes
- chore: bump version to 1.6.0
- docs: v1.6.0 release notes — complete the Unreleased section
- fix: associate_rubric never attached the rubric (#181) + shared write-confirmation guard (#189)
- ci: run Ruff checks in CI (#186)
- docs: session log 2026-07-30 — shipped #170/#171/#179/#180; four PRs merged + deployed
- docs: mark #170/#171/#179/#180 shipped in Current Focus
- feat: Tier 1 student write tools with per-course faculty gate (#170) (#185)
- fix(privacy): anonymization tiers — gate /conversations and /pages; cover missed email keys (#179) (#184)
- fix: self-identity tools; stop check_enrollment answering NO when it cannot know (#171) (#183)
- fix(rubrics): bookmark created rubrics into the course so Canvas shows them (#180) (#182)
- docs: session log 2026-07-29 — UMich triage blitz, #166 PII fix shipped (#177), safer defaults (#178), hosted spec drafted
- docs: refresh impact stats (2026-07-29 collection)
- docs: update test count from 328 to 550+ (#176)
- fix(security): safer defaults — code exec opt-in, image anonymization opt-out (#178)
- fix(security): recursive identity scrub for the anonymizer (#166) (#177)
- chore: add Canvas token rotation script + ignore .env backups
- docs: session log 2026-07-21 — fastmcp 3.4.4 shipped (#145/PR #167), #142 re-scoped, GRC follow-up sent
- fix: upgrade fastmcp 2.14.7 -> 3.4.4 (PYSEC-2026-2475/2476) (#145) (#167)
- docs: session log 2026-07-21 — #164 anonymization bypass fixed/merged/deployed, fastmcp CVE flagged
- docs: refresh impact stats (2026-07-20 collection)
- fix: anonymization bypass for /courses/-scoped student-data endpoints (#165)
- docs: session log 2026-07-10 — /doctor cleanup, #142 to Ash, #157 downgraded
- docs: move release checklist to internal/ to trim always-loaded CLAUDE.md
- docs: session log — #159 fixed (stateless HTTP), deployed and live-verified
- fix: run HTTP transport stateless to eliminate stale-session hangs (#159) (#160)
- docs: session log — Tech Services review doc sent, impact stats refresh
- chore(impact): refresh stats 2026-07-06 (stars 154, forks 47)
- docs: wrap session — v1.5.0 released, PR queue cleared, branches pruned
- chore: sync uv.lock to v1.5.0
Released: July 30, 2026
For installation instructions, see the README.