This release includes 1 security fix for security teams reviewing exposed deployments.
Published 2mo
MCP Data & Storage
✓ No known CVEs patched
This release patches 1 known CVE
Topics
ai
anilist
anime
manga
mcp
model-context-protocol
Affected surfaces
deps
auth
Summary
AI summaryPotential fix for clear‑text logging of sensitive information.
Full changelog
What's Changed
- Bump @types/node from 25.3.5 to 25.5.0 by @dependabot[bot] in https://github.com/gavxm/ani-mcp/pull/19
- Bump msw from 2.12.10 to 2.12.11 by @dependabot[bot] in https://github.com/gavxm/ani-mcp/pull/20
- Bump typescript-eslint from 8.56.1 to 8.57.0 by @dependabot[bot] in https://github.com/gavxm/ani-mcp/pull/17
- Bump docker/build-push-action from 6 to 7 by @dependabot[bot] in https://github.com/gavxm/ani-mcp/pull/16
- Bump vitest from 4.0.18 to 4.1.0 by @dependabot[bot] in https://github.com/gavxm/ani-mcp/pull/18
- Potential fix for code scanning alert no. 3: Clear-text logging of sensitive information by @gavxm in https://github.com/gavxm/ani-mcp/pull/21
Full Changelog: https://github.com/gavxm/ani-mcp/compare/v0.15.0...v0.15.1
Security Fixes
- Potential fix for clear‑text logging of sensitive information (code scanning alert #3).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About gavxm/ani-mcp
MCP server for AniList with taste-aware recommendations, watch analytics, social tools, and full list management.
Related context
Beta — feedback welcome: [email protected]