v0.3.4: config bounds fix, mcp-ts-core ^0.11.0 adoption
config bounds fix, mcp-ts-core ^0.11.0 adoption
- Enforce documented bounds on catalog and similarity env vars — SIMILARITY_FLOOR, CATALOG_FETCH_TIMEOUT_MS, CATALOG_REFRESH_SECONDS, CATALOG_URL, EMBEDDING_MODEL_ID (#8)
- Adopt @cyanheads/mcp-ts-core ^0.11.0 with a bunfig.toml supply-chain install guard (minimumReleaseAge) and Socket security scanner
- New devcheck checks: floating dependency specifiers (latest/*/dist-tags) and plugin-manifest identity/install-arg validation
- Strip native @duckdb/node-bindings entries from built .mcpb bundles
- Add Claude Code / Codex plugin marketplace manifests, .gitattributes, SECURITY.md, FUNDING.yml; canonicalize package.json author
- deps:
@cyanheads/mcp-ts-core^0.10.6 → ^0.11.0,typescript^6.0.3 → ^7.0.2 (+ dev-dep bumps)