From d3ced16ba95d24c06e4d01e9c0fe906c99c927dd Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Tue, 31 Mar 2026 15:24:43 +0000
Subject: [PATCH] =?UTF-8?q?bump:=20version=200.67.0=20=E2=86=92=200.68.0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 CHANGELOG.md                           | 21 +++++++++++++++++++++
 charts/nextcloud-mcp-server/Chart.yaml |  2 +-
 pyproject.toml                         |  2 +-
 uv.lock                                |  2 +-
 4 files changed, 24 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index dfb149b7..362f3465 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,27 @@ All notable changes to the Nextcloud MCP Server will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [PEP 440](https://peps.python.org/pep-0440/).
 
+## v0.68.0 (2026-03-31)
+
+### Feat
+
+- add web-based Login Flow v2 provisioning endpoint
+
+### Fix
+
+- require bearer token on provision endpoints (open redirect mitigation)
+- address PR review round 3 — info disclosure, conditional routes, cleanup
+- address PR review round 2 — expiry checks, race guards, poll tests
+- address PR review — XSS escape, asyncio→anyio, URL rewrite dedup
+- use app password auth for background sync in Login Flow mode
+- discover Login Flow v2 users in OAuth mode user manager
+- rewrite Login Flow v2 poll endpoint URL to use configured host
+- handle internal hostname without port in Login Flow v2 URL rewriting
+
+### Refactor
+
+- use redirect-based Login Flow v2 provision instead of popup
+
 ## v0.67.0 (2026-03-29)
 
 ### Feat
diff --git a/charts/nextcloud-mcp-server/Chart.yaml b/charts/nextcloud-mcp-server/Chart.yaml
index ef4fc277..02b52d61 100644
--- a/charts/nextcloud-mcp-server/Chart.yaml
+++ b/charts/nextcloud-mcp-server/Chart.yaml
@@ -3,7 +3,7 @@ name: nextcloud-mcp-server
 description: A Helm chart for Nextcloud MCP Server - enables AI assistants to interact with Nextcloud
 type: application
 version: 0.58.19
-appVersion: "0.67.0"
+appVersion: "0.68.0"
 keywords:
   - nextcloud
   - mcp
diff --git a/pyproject.toml b/pyproject.toml
index 7afdae95..fa852f33 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "nextcloud-mcp-server"
-version = "0.67.0"
+version = "0.68.0"
 description = "Model Context Protocol (MCP) server for Nextcloud integration - enables AI assistants to interact with Nextcloud data"
 authors = [
     {name = "Chris Coutinho", email = "chris@coutinho.io"}
diff --git a/uv.lock b/uv.lock
index e69754d1..c5a6acaa 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2086,7 +2086,7 @@ wheels = [
 
 [[package]]
 name = "nextcloud-mcp-server"
-version = "0.67.0"
+version = "0.68.0"
 source = { editable = "." }
 dependencies = [
     { name = "aiosqlite" },