Dayuan Jiang a6e812d3a5 fix(deps): update proxy-addr, shell-quote and wrangler to patched versions (#971) ...

npm audit fix in the root and in packages/mcp-server. proxy-addr 2.0.8 fixes
the IP spoofing through IPv4-mapped IPv6 trust subnets (GHSA-jqcg-44mw-7w3h),
shell-quote 1.12.0 fixes the command injection through a line terminator, and
wrangler 4.149.0 brings a miniflare that no longer bundles the vulnerable
sharp 0.35.4. No package is added; 56 lock entries for miniflare's sharp
binaries go away.

2026-10-10 19:53:55 +09:00

..

claude-plugin

feat: MCP feature parity, the web app on the MCP core, and provider fixes (#951)

2026-10-05 22:39:32 +09:00

mcp-server

fix(deps): update proxy-addr, shell-quote and wrangler to patched versions (#971)

2026-10-10 19:53:55 +09:00