v0.2.3: met_get_object order fix, mcp-ts-core ^0.10.14 maintenance
met_get_object order fix, mcp-ts-core ^0.10.14 maintenance
Batch results now preserve request order; adopts the framework's Socket install scanner and a release-age hold.
Fixed:
met_get_object(#5):objects[]/failed[]preserve the caller'sobjectIDsorder — an index-addressed cursor replaces the completion-ordered push into a shared array.
Changed:
- Supply-chain hardening: Socket install scanner (
bunfig.toml[install.security]) and a 3-dayminimumReleaseAgehold on new package versions, excluding@cyanheads/mcp-ts-core. - TypeScript 6 (
^5.9.3→^6.0.3). - Docker:
oven/bun:1.3.14pin, BuildKit cache mounts,--ignore-scriptson the build-stage install. - New
.github/SECURITY.md,.gitattributes,.github/FUNDING.yml.
Dependency bumps:
@cyanheads/mcp-ts-core^0.10.9 → ^0.10.14typescript^5.9.3 → ^6.0.3@biomejs/biome^2.5.0 → ^2.5.3@types/node^26.0.0 → ^26.1.1ignore^7.0.5 → ^7.0.6tsc-alias^1.8.17 → ^1.9.1vitest^4.1.9 → ^4.1.10
19 tests pass; bun run devcheck clean.