Skip to content

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 1mo MCP Security & Auth
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

changelog cve dependabot dependency-management mcp model-context-protocol
+4 more
npm pypi security typescript

Affected surfaces

auth deps

Summary

AI summary

Removed Cloudflare Analytics Engine binding and emission code due to incompatibility with free-tier accounts.

Full changelog

Removed

  • Reverted the Cloudflare Analytics Engine binding and emission code introduced in 0.1.8. Analytics Engine requires a Cloudflare Workers Paid plan; the deploy failed on our free-plan account. PRIVACY.md updated to say no telemetry is currently collected. Plan: revisit once the account is upgraded.

Breaking Changes

  • Removed Cloudflare Analytics Engine binding and emission code

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track DigiCatalyst-Systems/dep-diff-mcp

Get notified when new releases ship.

Sign up free

About DigiCatalyst-Systems/dep-diff-mcp

Translates a lockfile diff (npm, PyPI) into a human-readable upgrade plan. Point it at a Dependabot PR and get back semver classification, breaking changes from GitHub release notes, CVEs fixed in range, migration links, and a per-package recommendation. Bulk tool ranks up to 50 changes by risk (security > caution > review > likely-safe > safe)

All releases →

Beta — feedback welcome: [email protected]