This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+14 more
Affected surfaces
Summary
AI summaryPin protobufjs dependency to patched release avoiding critical advisory.
Full changelog
[email protected]
Release Links
- npm: https://www.npmjs.com/package/thumbgate/v/1.14.1
- GitHub Release: https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.14.1
- Compare: https://github.com/IgorGanapolsky/ThumbGate/compare/v1.14.0...v1.14.1
- Publish workflow: https://github.com/IgorGanapolsky/ThumbGate/actions/runs/24695366288
- npm published at: 2026-04-20T23:21:52.146Z
- npm shasum:
0dd89428d1fdc2a1a1896312ad6b33d1e18e7358 - npm tarball: https://registry.npmjs.org/thumbgate/-/thumbgate-1.14.1.tgz
- Release ref: 78b45f511005a764ce164c8fb81d1095786ffc6a
npm Email Companion
npm controls the native "Successfully published" email template, so the email itself stays short. Treat this generated artifact as the full release-note companion for that email: it carries the Changeset summaries, CHANGELOG entry, publish workflow, npm tarball, and shasum when available.
Full Changeset Release Notes
Patch Changes
.changeset/protobuf-runtime-audit.md
Pin the runtime protobuf dependency to a patched release so clean ThumbGate installs avoid the protobufjs critical advisory.
CHANGELOG.md Entry
No CHANGELOG.md section was found for 1.14.1; the release notes above were generated from the changed Changeset files.
Verification Standard
- Publish only runs from
mainafter version sync, tests, and runtime proof pass. - The npm package is smoke-tested after publish by installing
thumbgate@VERSIONin a clean runtime. - GitHub Release notes are generated from Changesets, not only GitHub auto-generated PR titles.
Security Fixes
- dep: protobufjs critical advisory addressed by pinning to patched release
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About IgorGanapolsky/mcp-memory-gateway
Pre-action gates that prevent AI coding agents from repeating known mistakes. Captures explicit feedback, auto-promotes failures into prevention rules, and enforces them via hooks.
Related context
Beta — feedback welcome: [email protected]