Skip to content

v2.1.0: IPv6 allowlist, geolocate_ip hardening, framework sync

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 18 Aug 12:55
· 11 commits to main since this release
v2.1.0
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
26d0fd8
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

IPv6 allowlist, geolocate_ip hardening, framework sync

  • IPv6 private-range guard flipped from a denylist to an allowlist; hex-form IPv4-mapped addresses now classify like the dotted spelling (#14, #26)
  • toolkit_geolocate_ip gains proxy/hosting/mobile flags, a bounded cache, fixed ip-api provenance, and sanitized provider strings; removes TOOLKIT_GEO_PROVIDER (#15, #18, #22, #25)
  • Public hosted server at toolkit.caseyjhand.com, pinned Docker base image + supply-chain hold, security contact updated
  • deps: @cyanheads/mcp-ts-core ^0.10.9 → ^0.11.5 (+ dev-dep bumps)

CHANGELOG v2.1.0

Assets 3
Loading