fix(security): bump vulnerable packages#1466
Merged
Conversation
|
Coverage Impact ⬆️ Merging this pull request will increase total coverage on Modified Files with Diff Coverage (1)
🛟 Help
|
Scra3
reviewed
Feb 12, 2026
1 new issue
|
- Replace local ToolResult type with SDK's CallToolResult - Type extra parameter as RequestHandlerExtra instead of any/unknown - Use Parameters<McpServer['registerTool']> to bridge zod duplication - Remove as-any casts in ai-proxy examples and tests - Fix missing beforeAll closing bracket in integration test Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Scra3
force-pushed
the
fix/high-vulnerabilities
branch
from
5182b91 to
f83c1ac
Compare
- Wrap server.connect/transport.handleRequest in try/finally for cleanup - Await transport.close() and server.close() to prevent unhandled rejections - Clean up immediately when response is already ended (non-streaming) - Catch and log cleanup errors in both paths to avoid replacing original errors - Demote per-request "Registered N tools" log from Info to Debug - Remove remaining as-any in ai-proxy example Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Scra3
force-pushed
the
fix/high-vulnerabilities
branch
from
f83c1ac to
5164b15
Compare
- Add proper assertion in "should call next() for non-MCP routes" test - Fix misplaced eslint-disable comment for @typescript-eslint/no-explicit-any - Remove 5 unnecessary no-param-reassign disable comments (rule allows props) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Scra3
approved these changes
Feb 12, 2026
forest-bot
added a commit
that referenced
this pull request
Feb 12, 2026
## @forestadmin/ai-proxy [1.4.2](https://github.com/ForestAdmin/agent-nodejs/compare/@forestadmin/ai-proxy@1.4.1...@forestadmin/ai-proxy@1.4.2) (2026-02-12) ### Bug Fixes * **security:** bump vulnerable packages ([#1466](#1466)) ([15a9279](15a9279))
forest-bot
added a commit
that referenced
this pull request
Feb 12, 2026
## @forestadmin/forestadmin-client [1.37.11](https://github.com/ForestAdmin/agent-nodejs/compare/@forestadmin/forestadmin-client@1.37.10...@forestadmin/forestadmin-client@1.37.11) (2026-02-12) ### Bug Fixes * **security:** bump vulnerable packages ([#1466](#1466)) ([15a9279](15a9279)) ### Dependencies * **@forestadmin/ai-proxy:** upgraded to 1.4.2
forest-bot
added a commit
that referenced
this pull request
Feb 12, 2026
## @forestadmin/mcp-server [1.8.2](https://github.com/ForestAdmin/agent-nodejs/compare/@forestadmin/mcp-server@1.8.1...@forestadmin/mcp-server@1.8.2) (2026-02-12) ### Bug Fixes * **security:** bump vulnerable packages ([#1466](#1466)) ([15a9279](15a9279)) ### Dependencies * **@forestadmin/agent-client:** upgraded to 1.4.7 * **@forestadmin/forestadmin-client:** upgraded to 1.37.11
forest-bot
added a commit
that referenced
this pull request
Feb 12, 2026
## @forestadmin/agent [1.72.8](https://github.com/ForestAdmin/agent-nodejs/compare/@forestadmin/agent@1.72.7...@forestadmin/agent@1.72.8) (2026-02-12) ### Bug Fixes * **security:** bump vulnerable packages ([#1466](#1466)) ([15a9279](15a9279)) ### Dependencies * **@forestadmin/ai-proxy:** upgraded to 1.4.2 * **@forestadmin/forestadmin-client:** upgraded to 1.37.11 * **@forestadmin/mcp-server:** upgraded to 1.8.2
forest-bot
added a commit
that referenced
this pull request
Feb 12, 2026
## @forestadmin/forest-cloud [1.12.88](https://github.com/ForestAdmin/agent-nodejs/compare/@forestadmin/forest-cloud@1.12.87...@forestadmin/forest-cloud@1.12.88) (2026-02-12) ### Bug Fixes * **security:** bump vulnerable packages ([#1466](#1466)) ([15a9279](15a9279)) ### Dependencies * **@forestadmin/agent:** upgraded to 1.72.8
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Definition of Done
General
Security