Skip to content

v0.1.7: HTML-normalization fixes and mcp-ts-core maintenance

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 17 Jul 00:21
v0.1.7
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
24479fc
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

HTML-normalization fixes and mcp-ts-core maintenance

Three html-normalizer/service findings patched, plus framework and supply-chain maintenance.

Dependency bumps:

  • @cyanheads/mcp-ts-core ^0.10.9 → ^0.10.14
  • @biomejs/biome ^2.5.0 → 2.5.2
  • @types/node ^26.0.0 → 26.1.1
  • tsc-alias ^1.8.17 → ^1.9.0
  • @socketsecurity/bun-security-scanner added at ^1.1.2

Fixed:

  • Non-BMP HTML entity decoding (emoji, rare CJK) via String.fromCodePoint, guarded against out-of-range code points (#8)
  • SE code-block language captured from the <pre> class, not <code> (#9)
  • Author display names and location decoded through decodeHtmlEntities (#12)

Changed:

  • Supply-chain hardening — Socket bun-security-scanner + 3-day minimumReleaseAge install gate (framework dep excluded)
  • Docker base image pinned to oven/bun:1.3.14; BuildKit cache mounts on install layers
  • New .gitattributes, .github/FUNDING.yml, .github/SECURITY.md

115 tests pass; bun run devcheck clean.

CHANGELOG v0.1.7

Assets 3
Loading