v2.6.0

What's Changed

• fix: add project parameter to all repo tools for repository name resolution by @AdityaMankal-MS in #1027
• Fix typo in troubleshooting documentation by @queuedecay in #1028
• [dependencies]: Bump @azure/msal-node from 5.1.0 to 5.1.1 by @dependabot[bot] in #1034
• fix: add null guard to trimPullRequest to prevent crash on null API response in #1030
• fix: check for unsafe path components when accessing filesystem by @aaudzei in #1042
• [dependencies]: Bump @azure/identity from 4.13.0 to 4.13.1 by @dependabot[bot] in #1047
• [dependencies]: Bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in #1049
• Add tool mcp_ado_repo_get_pull_request_changes by @posidron in #801
• fix: check for windows specific absolute path format not covered by w… by @aaudzei in #1054
• Wiki URL Path Traversal Fix - Adding parameters encoding in the wiki tool by @marekzmyslowski in #1057
• Work Items URL Path Traversal Fix - Adding parameters encoding in the work-items tool by @marekzmyslowski in #1058
• Pipelines URL Path Traversal Fix - Add parameters encoding to the pipelines tool by @marekzmyslowski in #1059
• [dependencies]: Bump typescript-eslint from 8.57.1 to 8.57.2 by @dependabot[bot] in #1055
• Enhance input validation across various tools by coercing number type… by @danhellem in #1051
• Add wit_get_work_item_attachment by @fien002 in #1022
• Apply Spotlighting to untrusted external content returned to LLM context by @marekzmyslowski in #1062
• [dependencies]: Bump path-to-regexp from 8.3.0 to 8.4.0 by @dependabot[bot] in #1071
• [dependencies]: Bump handlebars from 4.7.8 to 4.7.9 by @dependabot[bot] in #1068
• [dependencies]: Bump picomatch by @dependabot[bot] in #1066
• Add MCP_APPS domain and configure related tools by @danhellem in #1083
• [dependencies]: Bump @modelcontextprotocol/sdk from 1.27.1 to 1.29.0 by @dependabot[bot] in #1087
• [dependencies]: Bump typescript-eslint from 8.57.2 to 8.58.0 by @dependabot[bot] in #1088
• Add new members to ACL with Write role by @danhellem in #1094
• [dependencies]: Bump zod-to-json-schema from 3.25.1 to 3.25.2 by @dependabot[bot] in #1093
• [dependencies]: Bump azure-devops-extension-api from 4.269.1 to 4.270.0 by @dependabot[bot] in #1092
• [dependencies]: Bump ts-jest from 29.4.6 to 29.4.9 by @dependabot[bot] in #1098
• Update runId field to be optional in pipeline configuration by @danhellem in #1102
• [dependencies]: Bump @hono/node-server from 1.19.10 to 1.19.13 by @dependabot[bot] in #1119
• [dependencies]: Bump hono from 4.12.7 to 4.12.12 by @dependabot[bot] in #1120
• Continuation token fix for list tools in test plans by @krid-583 in #1110
• [dependencies]: Bump @azure/msal-node from 5.1.1 to 5.1.2 by @dependabot[bot] in #1099
• Add WIQL query tool and update documentation for work items by @danhellem in #1118
• [dependencies]: bump typescript-eslint from 8.58.0 to 8.58.1 by @dependabot[bot] in #1130
• Add guidance for WSL2/headless/SSH environments by @nebrass in #1128
• docs: Add missing mcp_ado_repo_get_file_content tool to TOOLSET.md by @krid-583 in #1134
• [dependencies]: Bump prettier from 3.8.1 to 3.8.2 by @dependabot[bot] in #1135
• Allowing search_code tool's project parameter to accept single string as input by @krid-583 in #1126
• Add elicitation decline and accept paths for work item tools by @danhellem in #1136
• [dependencies]: Bump typescript-eslint from 8.58.1 to 8.58.2 by @dependabot[bot] in #1143
• fix: Update field and expand parameter on get_work_item by @danhellem in #1144
• Add includeChangedFiles parameter to get_pull_request_by_id by @lgpearson1771 in #1117
• [dependencies]: Bump prettier from 3.8.2 to 3.8.3 by @dependabot[bot] in #1150
• feat: Enable Personal Access Token (PAT) authentication support by @danhellem in #1149
• [dependencies]: Bump hono from 4.12.12 to 4.12.14 by @dependabot[bot] in #1152
• feat: Update work item comment format to default to Markdown by @danhellem in #1155
• Fix wit_work_item_unlink ignoring type when url is provided by @marekzmyslowski in #1159
• docs: Update README and FAQ for PAT support and authentication methods by @danhellem in #1156
• chore: cutting release v2.6.0 by @aaudzei in #1160

New Contributors

• @queuedecay made their first contribution in #1028
• @posidron made their first contribution in #801
• @marekzmyslowski made their first contribution in #1057
• @fien002 made their first contribution in #1022
• @krid-583 made their first contribution in #1110
• @nebrass made their first contribution in #1128
• @lgpearson1771 made their first contribution in #1117

Full Changelog: v2.5.0...v2.6.0