v0.67.57
·
47 commits
to main
since this release
mcp-agentgate / mcp-agentgate-core 0.67.57
Patch release consuming the ROUND-421 changeset (#632, versioned by #633):
- AG-TP-001: hidden bidi/invisible characters embedded in defensive detection patterns — a regex character class listing the bidi range (
re.compile(r"[\u202a-\u202e…]"), YAMLpatterns:entries) or a quoted rule-test fixture payload, with hidden-unicode attack prose in the surrounding window or detection-rule filename — are now reported low instead of high. Hidden characters in ordinary source lines stay high.
Published manually per SOP during the ongoing GitHub Actions outage (degraded gate: GitGuardian + local build/test/lint/typecheck green, disclosed on the PRs).