摘要
此版本重点关注安全加固和稳定性改进,包括修复 proxychains4 的命令注入漏洞、恢复失效的 PostgreSQL 连接,以及更新 Docker 镜像的 glibc 兼容性。
修复
- 更新 release notes 章节的中文翻译规则 by @samanhappy in https://github.com/samanhappy/mcphub/pull/986
- 清理 proxychains4 命令参数以防远程代码执行(修复 #911)by @zsxh1990 in https://github.com/samanhappy/mcphub/pull/987
- 升级 adm-zip 从 0.5.16 到 0.6.0 by @dependabot[bot] in https://github.com/samanhappy/mcphub/pull/990
- 恢复失效的 PostgreSQL 连接 by @samanhappy in https://github.com/samanhappy/mcphub/pull/991
- 升级 axios 从 1.16.1 到 1.18.0 by @dependabot[bot] in https://github.com/samanhappy/mcphub/pull/992
- 升级 js-yaml 从 4.2.0 到 4.3.0 by @dependabot[bot] in https://github.com/samanhappy/mcphub/pull/993
- 升级 hono 从 4.12.25 到 4.12.27 by @dependabot[bot] in https://github.com/samanhappy/mcphub/pull/996
- 升级 typeorm 从 0.3.29 到 0.3.31 by @dependabot[bot] in https://github.com/samanhappy/mcphub/pull/995
- 升级 postcss 从 8.5.10 到 8.5.12 by @dependabot[bot] in https://github.com/samanhappy/mcphub/pull/999
- 更新 Docker 镜像的 glibc 兼容性 by @samanhappy in https://github.com/samanhappy/mcphub/pull/1000