Skip to content

v0.1.13: mcp-ts-core ^0.10.14, supply-chain hardening

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 10 Jul 22:08
v0.1.13
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
28a9ddf
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

mcp-ts-core ^0.10.14, supply-chain hardening

Full content[] rendering, bounded paginated canvas spillover, and sql_rejected contract parity for socrata_dataframe_query.

Added:

  • table_not_found error contract on socrata_dataframe_query
  • canvas_row_count output field on socrata_query_dataset

Changed:

  • Canvas spillover drains a bounded copy of the matching set (up to 50,000 rows) across paginated SODA calls, not just the returned page (#20)
  • Supply-chain hardening: bunfig.toml minimumReleaseAge hold + Socket install scanner, new .github/SECURITY.md
  • Dockerfile build-stage --ignore-scripts + BuildKit cache mounts

Fixed:

  • content[] renders every row/column structuredContent carries — no more render-only truncation (#19)
  • DataCanvas SQL-gate rejections now surface the declared sql_rejected contract with a recovery hint (#22)

Dependency bumps:

  • @cyanheads/mcp-ts-core ^0.10.10 → ^0.10.14
  • @socketsecurity/bun-security-scanner — new, ^1.1.2 (dev)

160 tests pass; bun run devcheck clean.

CHANGELOG v0.1.13

Assets 3
Loading