overpass 5xx reclassification, mcp-ts-core 0.12.5
- overpass_unavailable now throws ServiceUnavailable for every non-504 5xx (500, 501, 502, 503) from Overpass — 500 and 501 previously surfaced as InternalError
- security: the SSRF DNS guard now queries both dns.resolve*() and dns.lookup(), closing a Bun-1.4-on-Linux bypass where a hostname only the system resolver could see passed the guard (mcp-ts-core 0.12.4)
- adopts mcp-ts-core 0.12.5 (server identity resolution, pre-init log buffering, MarkdownBuilder.codeBlock fence sizing, bunfig.toml scaffold restoration) and resyncs 10 project skills
- deps:
@cyanheads/mcp-ts-core^0.12.3 → ^0.12.5,zod^4.4.3 → ^4.5.4 (+ dev-dep bumps)
Claude-Session: https://claude.ai/code/session_018oXsJvVupBvStoPqmGVgVG