Skip to content

v0.18.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Sep 19:22
· 78 commits to main since this release
v0.18.2
d4fdc62
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • Pin hono to 4.13.7 so a clean packed-consumer npm run security:audit
    closes GHSA-gqvv-2mrq-wpjv (toSSG() path traversal), GHSA-g6gw-c38x-mqfc
    (parseBody() memory exhaustion), and GHSA-crvj-82cr-hjcx (query-parser
    fragment differentials). Patched in 4.13.5+; other dependencies, the stdio
    MCP transport, and Apply schemas are unchanged. The local MCP server still
    does not initialize an HTTP server.
Assets 2
Loading