Skip to content

v2.0.0 — enforced network and workspace boundaries

Choose a tag to compare

View all tags
@TheStreamCode TheStreamCode released this 01 Aug 06:25
· 17 commits to main since this release
v2.0.0
da2130a

Security

  • Restricts credential-bearing invocations to HTTPS Chutes hosts and rejects redirects.
  • Blocks private/local asset downloads, unsafe redirects, and DNS resolutions to non-public addresses.
  • Enforces real-path workspace containment for inputs and outputs, including symlink and junction escapes.
  • Adds configurable size limits for remote responses and local input assets.

Changed

  • Existing named assets are preserved unless overwrite / --overwrite is explicitly enabled.
  • Adds stricter MCP/CLI validation and MCP safety annotations.
  • Adds ESLint, Prettier, coverage gates, Node.js 20/22/24 CI, CodeQL, pinned CI actions, and zero-audit release checks.
  • Updates the MCP SDK and vulnerable transitive Hono adapter; reduces the npm package to 13 files (about 138 KB compressed).
  • Refreshes README, security policy, contributing guide, bundled Agent Skill, changelog, and citation metadata.

Upgrade from 1.x

Automations that intentionally replace a named output must now pass overwrite: true through MCP or --overwrite through the CLI. Custom management endpoints require HTTPS except for loopback development.

Install or upgrade with npm install chutes-media-mcp@2.0.0.

Full Changelog: v1.2.2...v2.0.0

Assets 2
Loading