v2.1.4
Security
- Override the MCP SDK's transitive
@hono/node-serverandfast-uridependencies to patched releases (@hono/node-server2.0.10,fast-uri3.1.4), clearing the Hono static-file path-traversal advisory and the twofast-urihost-confusion advisories that the SDK's own ranges still resolve to. Fleet-wide companion to sweetrb/apple-notes-mcp#104 (@oliverames).