You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Security and dependency integrity
Enforce full 40-character commit SHA pins for every third-party GitHub Action.
Add regression tests and integrate action-pin validation into make check.
Pin current workflow actions, including actions/setup-node v7, to verified immutable commits.
MCP gateway
Upgrade Express from 4.22.2 to 5.2.1.
Retain passing HTTP gateway, concurrency, session, origin, and error-handling coverage.
Validation
Full local release playbook passed: static checks, 232 functional tests, 8 MCP tests, npm audit with zero vulnerabilities, actionlint, and 100% coverage of testable tools.