Skip to content

v2.0.35 - Path hardening and release publishing fixes

Choose a tag to compare

View all tags
@mickdarling mickdarling released this 23 Jun 22:44
v2.0.35
96092b8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Harden converter and CLI output path handling so generated files stay inside their intended output directories.
  • Restore SonarCloud main quality gate health with path traversal coverage, accessibility, and reliability fixes.
  • Update MCP registry publisher workflow verification for the current publisher release and OIDC audience.
  • Backfill the v2.0.34 changelog entry for release-history completeness.

Validation

  • PR #2295 passed SonarCloud, Security Audit, DollhouseMCP Security Audit, CodeQL, Docker amd64/arm64, Docker Compose, build artifacts, dependency review, documentation validation, Claude review, and the full OS/Node test matrix.
  • Local validation before the release PR included npm run build, npm test -- --maxWorkers=4, npm run verify:package-assets, and npm run security:audit with 0 findings.

Pull Requests

  • #2289 Fix MCP registry publisher OIDC workflow
  • #2292 Fix main Sonar quality gate findings
  • #2295 Release 2.0.35

Package

  • npm package: @dollhousemcp/mcp-server@2.0.35
Assets 4
Loading