Skip to content

Commit 8736508

Browse files
authored
fix(deps): bump qs to 6.16.0 for array-limit bypass advisory (#40)
1 parent fbc496a commit 8736508

3 files changed

Lines changed: 22 additions & 15 deletions

File tree

CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
# Changelog
22

3+
## [0.2.2] - 2026-09-03
4+
5+
- Add pnpm override for qs >=6.16.0 to resolve array-limit bypass advisory (Dependabot alert #42)
6+
37
## [0.2.1] - 2026-09-02
48

59
- Bump mongoose to 9.9.4 and add pnpm overrides for hono, @hono/node-server, fast-uri, ip-address, body-parser to resolve Dependabot security alerts

package.json

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "selfhub-mcp-server",
3-
"version": "0.2.1",
3+
"version": "0.2.2",
44
"description": "Personal MCP-powered digital hub - private data center with AI integration for memory, notes, and personal knowledge management",
55
"main": "build/index.js",
66
"type": "module",
@@ -39,7 +39,8 @@
3939
"ip-address": ">=10.3.1",
4040
"hono": ">=4.12.34",
4141
"@hono/node-server": ">=1.19.15 <2",
42-
"body-parser": ">=2.3.0"
42+
"body-parser": ">=2.3.0",
43+
"qs": ">=6.16.0"
4344
}
4445
}
4546
}

pnpm-lock.yaml

Lines changed: 15 additions & 13 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)