golem15/msd-core
3
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix: backfill changeset fragment PR number for #4560

Browse Source 
Forgot the pr:0 -> real-number backfill step from CONTRIBUTING.md's
documented changeset workflow after opening PR #4560, which broke
changeset-lint and docs-lint (fail_invalid_fragment /
fail_malformed_fragment).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
sim
2026-09-08 22:01:15 -04:00
parent bba20b51fd
commit 342bd8ca6b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.changeset/zesty-seals-click.md
View File

@@ -1,5 +1,5 @@
---
type: Security
pr: 0
pr: 4560
---
**Pinned the transitive `hono` dependency to `>=4.13.5`** — fixes a moderate-severity path-traversal/DoS advisory chain (GHSA-gqvv-2mrq-wpjv, GHSA-g6gw-c38x-mqfc, GHSA-crvj-82cr-hjcx) in `hono <4.13.5`, pulled in transitively via `@anthropic-ai/claude-agent-sdk` -> `@modelcontextprotocol/sdk`. Discovered as a newly-published advisory blocking `tests/npm-integrity-gate.test.cjs` while verifying an unrelated PR; fixed inline per this repo's no-defer policy rather than left for a separate PR. (#4513)