Skip to content

v2.1.2

Choose a tag to compare

View all tags
@mizanhemani mizanhemani released this 29 Oct 22:22
v2.1.2
e18ed29
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SPLIT-1798. zod 3.25.76 → 4.6.7 (GHSA-mrhx-c7xc-m3w5, HIGH) and body-parser 2.4.0 (GHSA-27r3-jxmh-p828, HIGH). (#56)

  • An oversized constrained tool argument (e.g. 200k selectedAddOns on the public get_booking_quote) is now refused on its length alone. Before: 2.7 s, +741 MB RSS and a 17 MB error reply.
  • The served tools/list contract is unchanged: 229 tools with identical names, order, descriptions, required fields, enums and bounds.
  • Deployed to production (mcp.go-splitt.com) on merge: dpl_4Sdhvab16mhwdcLygnXPFmtU7Ks9.

SECURITY-REVIEW: PASS 2f235d0 (21 files; none)

Assets 2
Loading