unifi-mcp-shared v0.6.17

Security fix for GHSA-9897-5v79-gfvc: startup no longer automatically loads project dotenv files or working-directory YAML. Custom YAML requires an explicit absolute CONFIG_PATH. Docker env_file and explicitly configured launcher environments remain supported.

If you previously relied on automatic dotenv loading, select a trusted env file in your launcher or configure the MCP client's env block.

Reported privately by @tmowbrey. See the security advisory for affected versions and migration guidance.

Run launcher commands from an operator-controlled directory; the launcher and any configuration it loads must also be trusted.

Install or upgrade:

pip install unifi-mcp-shared==0.6.17

What's Changed

Shared Library

• fix(security): require explicit trusted startup configuration by @sirkirby (468be04)

Omitted 4 unrelated monorepo commits from these notes.

Full Changelog: shared/v0.6.16...shared/v0.6.17