Local station filtering fixes, tightened descriptions, security patch
Fixes minchargepoints enforcement and zero-coordinate POI filtering in find_stations, tightens client-facing tool/resource descriptions, and clears a moderate js-yaml security advisory.
Dependency bumps:
@cyanheads/mcp-ts-core^0.10.9 → ^0.10.10@biomejs/biome2.5.0 → ^2.5.2@types/node26.0.0 → ^26.1.0tsc-alias^1.8.17 → ^1.9.0
Changed:
- Tightened client-facing tool/resource descriptions across find-stations, get-station, get-station-comments, lookup-reference, _station-schema.ts, and station.resource.ts (#3)
Fixed:
openchargemap_find_stationsnow enforcesminchargepointslocally — OCM'sminnumberofpointsquery parameter has no effect on live results (#1)openchargemap_find_stationsdrops zero-coordinate (0,0) and missing-coordinate POIs from search results; direct lookups keep them but flag the bad coordinate inreliabilityNote(#2)
Security:
- Lockfile re-resolution from the mcp-ts-core bump moves the transitive
depcheck→js-yamldependency to a patched version, clearing GHSA-h67p-54hq-rp68 (CVE-2026-53550) — a moderate quadratic-complexity DoS in merge-key handling
47 tests pass; bun run devcheck clean.