Skip to content

chore(release): 1.5.1 - #21

Merged
ralyodio merged 1 commit into
masterfrom
release/1.5.1
Aug 17, 2026
Merged

chore(release): 1.5.1#21
ralyodio merged 1 commit into
masterfrom
release/1.5.1

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Version bump to ship the dependency fixes from #20.

The published 1.5.0 still declares the old ranges — hono ^4.7.9, @hono/node-server ^1.14.1, form-data ^4.0.0 — so a fresh npm install @profullstack/mcp-server can still resolve vulnerable versions of them. This republishes with the patched floors.

No API or behavior change.

🤖 Generated with Claude Code

Ships the dependency fixes from #20. The published 1.5.0 still declares the old
ranges (hono ^4.7.9, @hono/node-server ^1.14.1, form-data ^4.0.0), so anyone
installing it can still resolve vulnerable versions. This republishes with the
patched floors.

No API or behaviour change.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

19 finding(s)

HIGH/CRITICAL: 13 | MEDIUM: 6

Severity Rule Location
HIGH secret-generic-api-key mcp_modules/convert2doc/examples/usage-example.js:11
HIGH secret-generic-api-key mcp_modules/fake_json/docs/api.md:151
HIGH secret-generic-api-key mcp_modules/fake_json/README.md:82
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:10
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:22
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:38
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:166
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:187
HIGH secret-generic-api-key mcp_modules/seo-ranking/examples/basic-usage.js:215
HIGH secret-generic-api-key mcp_modules/seo-ranking/README.md:415
HIGH sh-remote-script-execution mcp_modules/wcag/bin/install.sh:111
HIGH sh-remote-script-execution mcp_modules/wcag/bin/install.sh:120
HIGH sensitive-file-committed sample.env:1
MEDIUM manifest-install-lifecycle-script mcp_modules/backlinks/package.json:11
MEDIUM js-dynamic-code-execution mcp_modules/calculator/index.js:38
MEDIUM js-dynamic-code-execution mcp_modules/calculator/test/calculator.test.js:30
MEDIUM js-dynamic-code-execution mcp_modules/calculator/test/calculator.test.js:83
MEDIUM insecure-temp-file mcp_modules/scanner/test/service.test.js:121
MEDIUM manifest-install-lifecycle-script package.json:16

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit ebdf1c7 into master Aug 17, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant