Repository navigation

v1.0.0: release audit for the SDK 1.x release branch - #5087

Merged

cliffhall merged 18 commits into

v2/release/1.0.0from

v2/chore/5080-release-1.0.0-audit

Oct 10, 2026

Merged

v1.0.0: release audit for the SDK 1.x release branch#5087
cliffhall merged 18 commits into
v2/release/1.0.0from
v2/chore/5080-release-1.0.0-audit

Commits on Oct 10, 2026
- chore(deps): pin proxy-addr to ^2.0.8 (GHSA-jqcg-44mw-7w3h)
  
  cliffhall
  and
  claude
  committed
  0033d80
- chore(deps): pin ip-address to ^10.7.1 (GHSA-mwp4-54f8-5fhr and six more)
  
  cliffhall
  and
  claude
  committed
  4e9978e
- chore(deps): pin brace-expansion to ^5.0.12 (GHSA-rgw5-rvv9-x895 and three more)
  
  cliffhall
  and
  claude
  committed
  dc2c3cb
- chore(deps): raise the hono override to >=4.13.7 (GHSA-8j4g-w8fx-2239 and seven more)
  
  cliffhall
  and
  claude
  committed
  9cac34b
- chore(deps): raise the qs override to >=6.16.0 (GHSA-x5fp-wj9c-mxmx, GHSA-4mjr-xmp4-gh2g)
  
  cliffhall
  and
  claude
  committed
  ad25cd8
- chore(deps): pin fast-uri to ^3.1.8
  
  cliffhall
  and
  claude
  committed
  a83e890
- chore(deps): pin nanoid to ^3.3.18 (GHSA-2v37-7h3g-55p8)
  
  cliffhall
  and
  claude
  committed
  e99641c
- chore(deps): pin source-map-js to ^1.2.2 (GHSA-68fv-2mgg-jv7q)
  
  cliffhall
  and
  claude
  committed
  e54f613
- chore(deps): require @modelcontextprotocol/sdk ^1.31.0 (GHSA-6qxp-vccf-f47h)
  
  cliffhall
  and
  claude
  committed
  09edf63
- chore(deps): bump vitest and @vitest/coverage-v8 to ^4.1.11 (GHSA-82fw-gwwq-j7x9)
  
  cliffhall
  and
  claude
  committed
  ce10953
- chore(fetch): require protego>=0.6.2 (PYSEC-2026-3906)
  
  cliffhall
  and
  claude
  committed
  4063558
- chore(git): require gitpython>=3.1.60 (PYSEC-2026-3783 and fourteen more)
  
  cliffhall
  and
  claude
  committed
  ddf0804
- chore(python): lock anyio 4.15 (anyio advisory fixed in 4.14.2)
  
  cliffhall
  and
  claude
  committed
  b79d134
- chore(python): lock cryptography 50 (PYSEC-2026-3552)
  
  cliffhall
  and
  claude
  committed
  0bcb08c
- chore(python): lock pyjwt 2.15 (PYSEC-2026-4140 and twelve more)
  
  cliffhall
  and
  claude
  committed
  2a72d5e
- chore(fetch): lock urllib3 2.8 (PYSEC-2026-4175, -4176, -4177)
  
  cliffhall
  and
  claude
  committed
  dac4e70
- chore(fetch): lock soupsieve 2.10 (PYSEC-2026-4170, -4171)
  
  cliffhall
  and
  claude
  committed
  7926782
- Merge branch 'v2/release/1.0.0' into v2/chore/5080-release-1.0.0-audit
  cliffhall
  authored
  dd1e437

Commits

Commits on Oct 10, 2026