[dennisdornon]

Bumps the version to 1.5.0 and adds the 1.5.0 changelog entry.

Changes

• Version 1.5.0 in package.json, package-lock.json, src/index.ts, manifest.json and both fields in server.json.
• CHANGELOG.md: the 1.5.0 entry covers the Claude Desktop MCP Bundle, its checksum and provenance attestation, the clearer connection errors, the Claude Desktop setup guidance and the undici 7.30.0 update.

Once this merges and the release is published, the release workflow builds the bundle, smoke-tests it, attests it and attaches mainwp-mcp.mcpb and mainwp-mcp.mcpb.sha256 to the release.

Testing

From a clean clone of this commit with npm ci, all of these exit 0:

• npm run format:check, npm run lint, npm run typecheck
• npm run check-version: all five version fields read 1.5.0
• npm test: 40 files, 3053 tests passed
• npm run build and npm run build:mcpb: the bundle builds and validates
• node --import tsx tests/acceptance/run.ts --mode bundle --target fixture --scenario discovery-tools: passed

Summary by CodeRabbit

• New Features
  • Added the Claude Desktop MCP Bundle, with installation guidance, credential storage, SHA-256 checks, and build provenance verification details.
• Improvements
  • Startup network and TLS errors now include clearer information and troubleshooting links.
• Documentation
  • Updated guidance for changing Claude Desktop credentials, including certificate-trust limitations.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: mainwp/mainwp-mcp/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: 149b2008-3b4a-4c74-bdda-f640b43211cc

---

📥 Commits

Reviewing files that changed from the base of the PR and between 823f96b and ae4b69d.

---

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json and included by **

---

📒 Files selected for processing (5)

• CHANGELOG.md
• manifest.json
• package.json
• server.json
• src/index.ts

---

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• mainwp/mainwp (auto-detected)

---

Included review availability: This review used your included allowance. 9 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 10 reviews per hour.

---

📜 Recent review details

⏰ Context from checks skipped due to timeout. (6)

• GitHub Check: Socket Security: Pull Request Alerts
• GitHub Check: Aikido Security: Deep Review
• GitHub Check: Aikido Security: check code
• GitHub Check: test (20)
• GitHub Check: acceptance-fixture
• GitHub Check: test (22)

---

🧰 Additional context used

🔀 Multi-repo context mainwp/mainwp

Linked repositories findings

mainwp/mainwp

• includes/abilities/README.md:8,291 documents the MCP-facing Abilities API and notes that output schemas are documentation; actual output must be tested for schema conformance. [::mainwp/mainwp::]
• pages/page-mainwp-rest-api-page.php:2335,2353 confirms MCP setup uses WordPress Application Passwords—not the MainWP API key—and recommends a dedicated revocable credential. [::mainwp/mainwp::]
• No mainwp-mcp package or MainWP 1.4.0/1.5.0 release coupling was found. The PR’s version-only changes do not alter this dashboard contract. [::mainwp/mainwp::]

---

🔇 Additional comments (5)

CHANGELOG.md (1)

6-25: LGTM!

Also applies to: 26-37

---

package.json (1)

3-3: LGTM!

---

manifest.json (1)

5-5: LGTM!

---

server.json (1)

11-11: LGTM!

Also applies to: 16-16

---

src/index.ts (1)

75-75: LGTM!

---

---

📝 Walkthrough

Walkthrough

The changelog adds notes for version 1.5.0. The package, manifest, server metadata, and runtime version values change from 1.4.0 to 1.5.0.

Changes

Version 1.5.0 release update

Layer / File(s)	Summary
Release notes and version alignment CHANGELOG.md, manifest.json, package.json, server.json, src/index.ts	The changelog adds notes about the Claude Desktop MCP Bundle, startup network and TLS error reporting, credential guidance, and the undici update. Version values change to 1.5.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

---

Merge Risk: ⚪ Minimal · up to ae4b6

The release aligns its 1.5.0 version metadata, and the documented bundle checksum and provenance checks match the release artifacts. No actionable merge risk remains in the reviewed changes.

Pre-merge checks | 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies the 1.5.0 release, which matches the version updates and changelog entry in the pull request.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

---

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

---

---

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}