DKP 5fb9cc36bc fix(security): upgrade CLI deps and add overrides (#2952) ...

- Upgrade @modelcontextprotocol/sdk 1.24.0 → 1.25.2 (CVE-2026-0621
ReDoS)
- Upgrade tar 7.4.3 → 7.5.4+ (CVE-2026-23950 race condition)
- Add pnpm overrides for transitive deps:
  - qs <6.14.0 → 6.14.0 (CVE-2025-15284 DoS)
  - systeminformation <5.27.14 → 5.27.14 (CVE-2025-68154 cmd injection)
  - lodash <4.17.23 → 4.17.23 (CVE-2025-13465 prototype pollution)

---------

Co-authored-by: nicktrn <55853254+nicktrn@users.noreply.github.com>

2026-01-27 16:33:04 +00:00

..

build

chore: release v4.3.3 (#2893)

2026-01-23 17:36:11 +00:00

cli-v3

fix(security): upgrade CLI deps and add overrides (#2952)

2026-01-27 16:33:04 +00:00

core

chore: release v4.3.3 (#2893)

2026-01-23 17:36:11 +00:00

python

chore: release v4.3.3 (#2893)

2026-01-23 17:36:11 +00:00

react-hooks

fix(react-hooks): prevent onComplete from firing prematurely when stream disconnects (#2929)

2026-01-27 16:21:56 +00:00

redis-worker

fix(fair-queue): ensure concurrency is released when a message reaches visibility timeout to prevent concurrency leaks (#2907)

2026-01-24 13:06:35 +00:00

rsc

chore: release v4.3.3 (#2893)

2026-01-23 17:36:11 +00:00

schema-to-json

chore: release v4.3.3 (#2893)

2026-01-23 17:36:11 +00:00

trigger-sdk

Fix/sdk stream root fallback (#2874)

2026-01-25 06:53:26 +00:00