This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+5 more
Affected surfaces
ReleasePort's take
Moderate signalThe release hardens credential handling and mitigates injection attacks while adding CodeQL scans and Dependabot updates to CI workflows.
Why it matters: Security severity scored 80; hardening credentials blocks injection risks. Bug‑fix severity 40 adds automated workflow scanning, improving reliability.
Summary
AI summaryMinor fixes and improvements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Hardens credential handling and contains injection attacks. Hardens credential handling and contains injection attacks. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Adds CodeQL scans and Dependabot updates for workflow hardening. Adds CodeQL scans and Dependabot updates for workflow hardening. Source: llm_adapter@2026-07-17 Confidence: low |
— |
| Refactor | Low |
Implements package boundary changes. Implements package boundary changes. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
Full changelog
What's Changed
- Land trust baseline: docs scrub, workflow hardening, CodeQL, Dependabot by @zk-xyz in https://github.com/Brandcode-Studio/brandsystem-mcp/pull/14
- Release 0.9.6: package boundary, credential hardening, injection containment by @zk-xyz in https://github.com/Brandcode-Studio/brandsystem-mcp/pull/22
Full Changelog: https://github.com/Brandcode-Studio/brandsystem-mcp/compare/v0.9.5...v0.9.6
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Brand-System/brandsystem-mcp
Make your brand machine-readable. Extract brand identity (colors, fonts, logo, voice, visual rules) from any website via static CSS + rendered-page extraction, compile into DTCG tokens, brand runtime contracts, and interaction policies. 34 tools across 4 progressive sessions. Subscribable `brand://runtime` and `brand://policy` MCP resources. Content compliance scoring (0-100), pass/fail gate, and HTML/CSS preflight. Brandcode Studio connector for hosted brand sync.
Beta — feedback welcome: [email protected]