Patch Changes

• fix: copy tsconfig*.json for Docker build (#180)

• feat: migrate to typescript 6 (#162)

• chore: migrate to pnpm 11.0.8 and pin CI setup via packageManager (#179)

Patch Changes

• fix(security): override minimatch to >=10.2.3 to address GHSA-23c5-xmqv-rm74 and GHSA-7r86-cg39-jmmj (#146)

• fix(security): override koa to ^3.1.2 to address GHSA-7gcc-r8m5-44qm (#145)

• fix(security): override express-rate-limit and @hono/node-server to fix GHSA-46wh-pxpv-q5gq and GHSA-wc8c-qw6v-h7f6 (#152)

• fix(security): hono override to address GHSA-q5qw-h33p-qvwr, GHSA-wc8c-qw6v-h7f6, GHSA-p6xx-57qc-3wxr and GHSA-5pq2-9x2x-5p6w (#150)

• fix(security): bump hono to >=4.12.2 to address GHSA-xh87-mx6m-69f3 (#144)

• fix(security): override rollup to >=4.59.0 to address GHSA-mw96-cpmx-2vgc (#147)

Patch Changes

• fix(deps): bump hono to >=4.11.10 (GHSA-gq3j-xvxp-8hrf) (#138)

• fix(deps): add minimatch override >=10.2.1 (GHSA-3ppc-4f35-3m26, CVE-2026-26996) (#139)

• fix(deps): bump qs to >=6.14.2 (GHSA-6rw7-vpxm-498p, CVE-2025-15284) (#137)

Patch Changes

• fix(security): upgrade MCP SDK to 1.26.0 to address CVE-2026-25536 (GHSA-345p-7cg4-v4c7) (#131)

• fix(lint): attach cause to rethrown errors for preserve-caught-error (#134)

Patch Changes

• chore: update hono to address CVE-2026-24398, CVE-2026-24472, CVE-2026-24473 (#128)

Patch Changes

• fix(security): update hono to >=4.11.4 to patch JWT algorithm confusion vulnerabilities (CVE-2026-22817, CVE-2026-22818) (#123)

Patch Changes

• fix(security): update qs to >=6.14.1 to patch CVE-2025-15284 (#117)

Minor Changes

• feat: add configurable server host binding for external connections (#92)

Patch Changes

• chore: dependency updates (0b5f5b7)

• fix(security): override js-yaml to >=4.1.1 to patch prototype pollution vulnerability (#110)

• fix: install git in builder stage for GitHub dependencies (#105)

• fix(security): override glob to >=10.5.0 to patch command injection vulnerability (#109)

Patch Changes

• feat: replace dotenv with a forked version that does not use console logging (0c4e463)

• chore: dependency updates (eaa8b76)

Patch Changes

• chore: dependency updates (a47b7a5)

• test: fix failing tests due to tool parameter schema mis-alignment (332ac6c)

• fix: zod record method arguments (dcc93c5)

• fix: FastMCP tool type definition update (f4baeb5)