Skip to content

Release: SDK 0.45.1 bump and security fixes#35

Merged
fbsobreira merged 1 commit into
mainfrom
develop
Mar 19, 2026
Merged

Release: SDK 0.45.1 bump and security fixes#35
fbsobreira merged 1 commit into
mainfrom
develop

Conversation

@fbsobreira

Copy link
Copy Markdown
Member

Summary

  • Bump Klever SDK version from 0.45.0 to 0.45.1 across knowledge base, docs, and install scripts
  • Add ksc all update command to knowledge base and docs
  • Resolve all 11 Dependabot security vulnerabilities by bumping packages (zero overrides)
  • Bump eslint to v10, @modelcontextprotocol/sdk to 1.27.1, express-rate-limit to 8.2.2

Test plan

  • pnpm audit — 0 vulnerabilities
  • pnpm run validate — typecheck, lint, 131 tests passing

* chore: bump Klever SDK version from 0.45.0 to 0.45.1

* feat: add ksc all update command to knowledge base and docs

* fix: resolve all dependency security vulnerabilities

Bump packages to fix all 11 Dependabot alerts without overrides:
- @modelcontextprotocol/sdk ^1.27.1 (fixes hono, @hono/node-server CVEs)
- eslint ^10.0.3 + @eslint/js ^10.0.1 (fixes ajv, minimatch, flatted CVEs)
- typescript-eslint ^8.57.1 (eslint 10 peer compatibility)
- express-rate-limit ^8.2.2 (fixes IPv6 bypass)
- Remove all pnpm overrides (no longer needed)
@fbsobreira
fbsobreira merged commit 14e69ec into main Mar 19, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant