This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+1 more
Affected surfaces
Summary
AI summaryUpdates Patch Changes, https://github.com/sapientpants/sonarqube-mcp-server/pull/327, and @modelcontextprotocol/sdk across a mixed release.
Full changelog
Patch Changes
-
#327
cd17f93- chore: update dependencies to latest versionsUpdated production dependencies:
- @modelcontextprotocol/sdk: 1.20.0 → 1.20.1
- pino: 10.0.0 → 10.1.0
- sonarqube-web-api-client: 0.11.1 → 1.0.1 (major update with stricter typing)
Updated dev dependencies:
- vite: 7.1.10 → 7.1.11
- @cyclonedx/cdxgen: 11.9.0 → 11.10.0
- @eslint/js: 9.37.0 → 9.38.0
- @types/node: 24.7.2 → 24.8.1
- eslint: 9.37.0 → 9.38.0
Note: zod remains pinned to 3.25.76 to match @modelcontextprotocol/sdk dependency
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About sapientpants/sonarqube-mcp-server
A Model Context Protocol (MCP) server that integrates with SonarQube to provide AI assistants with access to code quality metrics, issues, and quality gate statuses
Beta — feedback welcome: [email protected]