rustsdcmcp v0.4.1

Security

• Bumps the gcr.io/distroless/cc-debian13 runtime base for DSA-6572-1
  (ca-certificates). (#282)

v0.4.0 — 2026-10-21 (tagged, not released)

The tag exists, but its release image failed the Trivy scan on DSA-6572-1, so
no GitHub release or MCP Registry entry was published. Use v0.4.1.

Security

• Bumps rustls-webpki to 0.103.16 and webpki-root-certs to 1.0.10 for
  RUSTSEC-2026-0382 and RUSTSEC-2026-0383. (#280)

Fixed

• IPS signature names are no longer rewritten by the generic redaction.
  Juniper attack names such as SNMP:COMMUNITY:… or HTTP:STC:PASSWORD-…
  read as key: value to the free-text scan and came back as
  SNMP:COMMUNITY[REDACTED] or HTTP:[REDACTED]. list_sdc_resources /
  get_sdc_resource for ips_signatures now return each signature's name
  verbatim. The IPS rule and exempt-rule reads, and IPS write results and
  change-set details, do the same for ips_signature[].name references and
  for the name of a signature being written. Descriptions, rule and profile
  names, and every other field are still redacted. (#277)

Added

• Change-controlled IPS writes: prepare_sdc_ips_write / apply_sdc_ips_write
  create and update custom IPS signatures and IPS profiles through the same
  plan, approval, and drift-checked apply flow as object writes. They are their
  own grant, so an existing object-write or wildcard token does not gain them.
  Updates to predefined signatures (those carrying a signature-bundle
  import_id) are refused, and a body may not set uuid or import_id.
  A successful create returns the UUID SDC allocated as created_uuid.
  A signature is treated as predefined when it carries import_id or
  activation_date, and an update also needs a known observed
  signature_type. IPS write results and IPS change-set details return
  detection patterns verbatim (the generic redaction rewrote patterns such as
  .*password=.*), while every other field is still redacted.
  IPS rules inside a profile (family: rule with profile_uuid) are how
  signatures are added to a profile; prepare confirms the profile and every
  referenced signature exist. Signatures, profiles and rules can also be
  deleted. Prepare refuses to delete a profile still referenced by a firewall
  rule, the firewall global settings or global profile, or a device's global
  settings, or a signature still referenced by an IPS or exempt rule, and names
  the referrers. That reference scan is capped at 500 SDC reads and refuses the
  delete if it cannot finish, including when a list returns fewer items than
  its reported count. Predefined signatures are never deleted. Existing IPS
  write grants now cover delete as well; re-scope tokens if that is not wanted.
  Exempt-rule writes are not included yet.
  (#266)