8000 Tags · cyanheads/git-mcp-server · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Tags: cyanheads/git-mcp-server

Tags

v2.1.8

Toggle v2.1.8's commit message

Verified

This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode 
fix(deps): pin dotenv to 16.6.1 to suppress console message

- Pins the `dotenv` package to `16.6.1` to prevent the promotional message from being printed to the console during startup, which could interfere with STDIO-based MCP clients.
- Adds `dotenv` to the `.ncurc.json` reject list to prevent future automatic upgrades to problematic versions.
- Updates the CHANGELOG to document this fix.

v2.1.7

Toggle v2.1.7's commit message

Verified

This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode 
chore(deps): bump version to 2.1.7 and update config

v2.1.6

Toggle v2.1.6's commit message

Verified

This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode 
chore(release): v2.1.6

v2.1.5

Toggle v2.1.5's commit message

Verified

This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode 
fix(security): patch command injection vulnerability

Replaced all instances of `child_process.exec` with `child_process.execFile` to prevent shell metacharacter injection. This ensures that user-provided input is treated as arguments rather than being executed as part of a shell command, mitigating the risk of remote code execution.

This addresses the vulnerability disclosed in GHSA-3q26-f695-pp76.

Special thanks to @dellalibera for the responsible disclosure.

v2.1.4

Toggle v2.1.4's commit message

Verified

This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode 
feat(http): migrate from Express to Hono and refactor auth

- Replaces the Express-based HTTP transport with a more performant and modern implementation using Hono.
- Refactors the authentication layer into a modular, strategy-based system supporting both JWT and OAuth 2.1, configured via `MCP_AUTH_MODE`.
- Simplifies session management by removing transport-specific state in favor of a unified, session-scoped working directory.
- Introduces a centralized HTTP error handler for consistent JSON-RPC error responses.

v2.1.3

Toggle v2.1.3's commit message 
docs(changelog): update changelog and documentation for v2.1.3

v2.1.2

Toggle v2.1.2's commit message 
chore(deps): update package.json and dependencies

- Updated package.json structure to align with mcp-ts-template.
- Added new scripts for documentation generation and spec fetching.
- Synchronized dependencies and devDependencies with the template.

v2.1.1

Toggle v2.1.1's commit message 
chore(deps): bump dependencies

v2.1.0

Toggle v2.1.0's commit message 
chore: bump version to 2.1.0

- Updates version in package.json, package-lock.json.
- Updates version badge in README.md.
- Updates CHANGELOG.md to reflect version 2.1.0.

v2.0.15

Toggle v2.0.15's commit message 
chore: bump version to 2.0.15 and update related files

- Updated SDK version in README.md
- Downgraded chrono-node to 2.8.0 and added .ncurc.json to manage this
- Refined instructional text in gitWrapupInstructions tool
- Updated documentation (README.md, docs/tree.md, CHANGELOG.md)
0