Skip to content

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agent-reliability ai-agents ai-cost-optimization ai-safety amp claude-code
+14 more
codex cursor developer-tools feedback-loop gemini guardrails mcp mcp-server opencode pre-action-checks reduce-llm-cost save-llm-tokens thompson-sampling thumbgate

Affected surfaces

deps

Summary

AI summary

Pin protobufjs dependency to patched release avoiding critical advisory.

Full changelog

[email protected]

Release Links

  • npm: https://www.npmjs.com/package/thumbgate/v/1.14.1
  • GitHub Release: https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.14.1
  • Compare: https://github.com/IgorGanapolsky/ThumbGate/compare/v1.14.0...v1.14.1
  • Publish workflow: https://github.com/IgorGanapolsky/ThumbGate/actions/runs/24695366288
  • npm published at: 2026-04-20T23:21:52.146Z
  • npm shasum: 0dd89428d1fdc2a1a1896312ad6b33d1e18e7358
  • npm tarball: https://registry.npmjs.org/thumbgate/-/thumbgate-1.14.1.tgz
  • Release ref: 78b45f511005a764ce164c8fb81d1095786ffc6a

npm Email Companion

npm controls the native "Successfully published" email template, so the email itself stays short. Treat this generated artifact as the full release-note companion for that email: it carries the Changeset summaries, CHANGELOG entry, publish workflow, npm tarball, and shasum when available.

Full Changeset Release Notes

Patch Changes

.changeset/protobuf-runtime-audit.md

Pin the runtime protobuf dependency to a patched release so clean ThumbGate installs avoid the protobufjs critical advisory.

CHANGELOG.md Entry

No CHANGELOG.md section was found for 1.14.1; the release notes above were generated from the changed Changeset files.

Verification Standard

  • Publish only runs from main after version sync, tests, and runtime proof pass.
  • The npm package is smoke-tested after publish by installing thumbgate@VERSION in a clean runtime.
  • GitHub Release notes are generated from Changesets, not only GitHub auto-generated PR titles.

Security Fixes

  • dep: protobufjs critical advisory addressed by pinning to patched release

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track IgorGanapolsky/mcp-memory-gateway

Get notified when new releases ship.

Sign up free

About IgorGanapolsky/mcp-memory-gateway

Pre-action gates that prevent AI coding agents from repeating known mistakes. Captures explicit feedback, auto-promotes failures into prevention rules, and enforces them via hooks.

All releases →

Beta — feedback welcome: [email protected]