Skip to content

v2.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Jun 21:09
· 76 commits to main since this release
v2.4.0
0dedbf5

Release v2.4.0

Release type: stable
Release line: 2.4.x
Branch: release/2.4.x

[2.4.0] - 2026-06-18

Added

  • Introduced lazy loading for Node.js built-in modules (path and fs) in fromFile method to ensure compatibility with V8-isolate runtimes like Cloudflare Workers and Deno.
  • Added functions to decode IPv4-mapped IPv6 addresses and dereference internal JSON pointers without using Node dependencies, improving cross-platform compatibility.

Changed

  • Updated dependency version and package manager to yarn@4.14.1.
  • Enhanced hostname blocklist checking to prevent bypass using IPv4-mapped IPv6 addresses.
  • Prevented automatic HTTP redirect following in $Ref resolution to improve security.

Security

  • Secured digest authentication by stripping CR/LF and backslashes in quotes and tokens to prevent header/response-splitting vulnerabilities.

Installation

npm install mcp-from-openapi@2.4.0
Assets 2
Loading