This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+5 more
Affected surfaces
Summary
AI summarySecurity fixes from updated production dependencies.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Updated production dependencies to resolve known vulnerabilities in HTTP and JSON‑schema packages. Updated production dependencies to resolve known vulnerabilities in HTTP and JSON‑schema packages. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Low |
Synchronized `prts-mcp-ts-stdio` bin metadata in `package-lock.json`. Synchronized `prts-mcp-ts-stdio` bin metadata in `package-lock.json`. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
Full changelog
Security
- Updated transitive production dependencies to resolve known vulnerabilities
in HTTP and JSON-schema support packages.
Fixed
- Synchronized the
prts-mcp-ts-stdiobin metadata inpackage-lock.json.
Install
# Run directly with npx (Node.js entrypoint, zero extra runtime install)
npx prts-mcp-ts
# Or install globally
npm install -g [email protected]
# Bun runtime (default production runtime since 2.2.0)
bunx --bun -p [email protected] prts-mcp-ts-bun
The default Docker image (prts-mcp-ts:latest) runs under Bun since 2.2.0;
ts/Dockerfile.node provides the legacy Node.js image.
MCP endpoint: http://localhost:3000/mcp
Security Fixes
- Updated transitive production dependencies to resolve known vulnerabilities in HTTP and JSON‑schema support packages.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About 3aKHP/prts-mcp
MCP Server for Arknights, querying the PRTS Wiki API and serving auto-synced operator archives and voice lines from game data. Designed for fan-creation (同人創作) AI agents. Python (stdio/Docker) and TypeScript (Streamable HTTP) implementations.
Related context
Related tools
Earlier breaking changes
- vts/v1.0.0 Public tool surface frozen; 9 MCP tool names, parameters, and response formats locked.
Beta — feedback welcome: [email protected]