This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+2 more
ReleasePort's take
Light signalThe release bumps several dependencies—including Node runtime to version 26‑alpine—and adds strict tool input validation with OCI registry manifest support.
Why it matters: Updating the Node runtime to version 26‑alpine and enabling strict input validation improves security posture; adopt these changes before your next deployment cycle.
Summary
AI summaryUpdates deps-dev, deps, and feat across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Add strict tool input validation, OCI registry manifest support, and scanner‑visible packaging. Add strict tool input validation, OCI registry manifest support, and scanner‑visible packaging. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Bump node runtime from 24‑alpine to 26‑alpine. Bump node runtime from 24‑alpine to 26‑alpine. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Bump docker/setup-qemu-action from 3 to 4. Bump docker/setup-qemu-action from 3 to 4. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Bump actions/checkout from 6 to 7. Bump actions/checkout from 6 to 7. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Bump docker/setup-buildx-action from 3 to 4. Bump docker/setup-buildx-action from 3 to 4. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Bump @types/node from 25.9.3 to 26.1.0. Bump @types/node from 25.9.3 to 26.1.0. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Bump tsx from 4.22.4 to 4.23.1. Bump tsx from 4.22.4 to 4.23.1. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Bump typescript-eslint from 8.61.0 to 8.64.0. Bump typescript-eslint from 8.61.0 to 8.64.0. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Bump eslint from 10.5.0 to 10.7.0. Bump eslint from 10.5.0 to 10.7.0. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Bump prettier from 3.8.4 to 3.9.5. Bump prettier from 3.8.4 to 3.9.5. Source: llm_adapter@2026-07-14 Confidence: high |
— |
Full changelog
What's Changed
- Release v2.0.0 by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/65
- feat: strict tool inputs, OCI registry manifest, scanner-visible packaging by @PaSympa in https://github.com/PaSympa/discord-mcp/pull/80
- chore(deps): bump node from 24-alpine to 26-alpine by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/66
- chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/67
- chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/69
- chore(deps-dev): bump @types/node from 25.9.3 to 26.1.0 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/79
- chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/68
- chore(deps-dev): bump tsx from 4.22.4 to 4.23.1 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/77
- chore(deps-dev): bump typescript-eslint from 8.61.0 to 8.64.0 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/76
- chore(deps-dev): bump eslint from 10.5.0 to 10.7.0 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/73
- chore(deps-dev): bump prettier from 3.8.4 to 3.9.5 by @dependabot[bot] in https://github.com/PaSympa/discord-mcp/pull/78
Full Changelog: https://github.com/PaSympa/discord-mcp/compare/v2.0.0...v2.1.0
Breaking Changes
- Minimum Node.js runtime version increased to 26-alpine
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About PaSympa/discord-mcp
Lightweight multi-guild Discord MCP server with 60+ tools for messages, channels, roles, forums, webhooks, and moderation.
Related context
Beta — feedback welcome: [email protected]