borgmcp 6.0.3

borgmcp 6.0.3

This release updates three runtime dependencies to versions that close published security advisories. It contains no changes to borgmcp's own code or CLI workflows.

All three packages are transitive dependencies of @modelcontextprotocol/sdk; the borgmcp source does not import them directly. These notes make no claim about whether borgmcp reaches the affected code paths.

Updated dependencies

The versions listed below are the ones the repository's lockfile pins and CI tests. The published package contains no npm-shrinkwrap.json, so an npm install, including borg update, resolves each package within its dependents' declared ranges, and the installed versions can differ from the ones listed.

• hono 4.12.34 → 4.13.11 (through @modelcontextprotocol/sdk and @hono/node-server). Closes:
  • GHSA-gqvv-2mrq-wpjv: incomplete fix for CVE-2026-39408; toSSG() can still write files outside the output directory.
  • GHSA-g6gw-c38x-mqfc: unbounded dot-notation nesting in parseBody() can cause memory exhaustion.
  • GHSA-crvj-82cr-hjcx: the query parser reads parameters after the URL fragment.
• ip-address 10.4.0 → 10.7.2 (through @modelcontextprotocol/sdk and express-rate-limit). Closes:
  • GHSA-rpw4-54j3-4h4q: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10.
  • GHSA-2vr4-cq9g-pvrc: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48.
  • GHSA-j6r3-76f7-8jcv: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space.
  • GHSA-h3mg-xc3c-68pw: Address6 builds a parse diagnostic proportional to the input with no length bound.
• fast-uri 3.1.7 → 3.1.8 (through @modelcontextprotocol/sdk and ajv). Closes:
  • GHSA-hrr3-gc8f-f4qj: inconsistent host case normalization via percent-encoded octets.

Upgrading

1. Run borg update.
2. The shared contract pin is unchanged: borgmcp-shared 2.2.0.