Skip to content

v0.1.4: Local station filtering fixes, tightened descriptions, security patch

Latest

Choose a tag to compare

@cyanheads cyanheads released this 04 Jul 19:16
v0.1.4
603fc79

Local station filtering fixes, tightened descriptions, security patch

Fixes minchargepoints enforcement and zero-coordinate POI filtering in find_stations, tightens client-facing tool/resource descriptions, and clears a moderate js-yaml security advisory.

Dependency bumps:

  • @cyanheads/mcp-ts-core ^0.10.9 → ^0.10.10
  • @biomejs/biome 2.5.0 → ^2.5.2
  • @types/node 26.0.0 → ^26.1.0
  • tsc-alias ^1.8.17 → ^1.9.0

Changed:

  • Tightened client-facing tool/resource descriptions across find-stations, get-station, get-station-comments, lookup-reference, _station-schema.ts, and station.resource.ts (#3)

Fixed:

  • openchargemap_find_stations now enforces minchargepoints locally — OCM's minnumberofpoints query parameter has no effect on live results (#1)
  • openchargemap_find_stations drops zero-coordinate (0,0) and missing-coordinate POIs from search results; direct lookups keep them but flag the bad coordinate in reliabilityNote (#2)

Security:

  • Lockfile re-resolution from the mcp-ts-core bump moves the transitive depcheckjs-yaml dependency to a patched version, clearing GHSA-h67p-54hq-rp68 (CVE-2026-53550) — a moderate quadratic-complexity DoS in merge-key handling

47 tests pass; bun run devcheck clean.