v1.7.4

What's Changed

No SDK API changes in this release.

Examples

• lazy-auth-server: require PKCE and bind redirect_uri in token exchange (#681)
• lazy-auth-server: support mounting under a base path of a host Express app (#683)

Security

npm audit now reports 0 vulnerabilities:

• Removed unused vitest devDependency from basic-host
• systeminformation bumped to 5.31.6+ in system-monitor-server (GHSA-hvx9-hwr7-wjj9)
• Transitive dependency updates: devalue 5.8.1, fast-uri 3.1.2, hono 4.12.23, ip-address 10.2.0, express-rate-limit 8.5.2, postcss 8.5.15, qs 6.15.2, svelte 5.56.1 (#685)

Full Changelog: v1.7.3...v1.7.4