镜像站点 · 本页由第三方 GitHub 只读镜像提供,非 GitHub 官方站点,不接受任何登录或凭据输入。前往 github.com
Skip to content

fix(@angular/cli): bump @modelcontextprotocol/sdk to 1.31.0 - #34264

Merged
alan-agius4 merged 1 commit into
angular:21.2.xfrom
florimond-collette:fix/mcp-sdk-21.2.x
Oct 7, 2026
Merged

alan-agius4 merged 1 commit into
angular:21.2.xfrom
florimond-collette:fix/mcp-sdk-21.2.x

Conversation

@florimond-collette

Copy link
Copy Markdown

Bumps @modelcontextprotocol/sdk to 1.31.0 to address GHSA-6qxp-vccf-f47h / CVE-2026-104850.

Closes #34263

@google-cla

google-cla Bot commented Oct 6, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the @modelcontextprotocol/sdk dependency in packages/angular/cli/package.json from version 1.30.0 to 1.31.0. There are no review comments, and I have no feedback to provide.

@alan-agius4 alan-agius4 closed this Oct 6, 2026
@alan-agius4 alan-agius4 reopened this Oct 6, 2026
@alan-agius4 alan-agius4 added action: merge The PR is ready for merge by the caretaker target: lts This PR is targeting a version currently in long-term support labels Oct 7, 2026
@alan-agius4

Copy link
Copy Markdown
Collaborator

Thanks for your contribution.

@alan-agius4
alan-agius4 merged commit 9d2987f into angular:21.2.x Oct 7, 2026
40 of 41 checks passed
@alan-agius4

Copy link
Copy Markdown
Collaborator

This PR was merged into the repository. The changes were merged into the following branches:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/cli target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

@angular/cli 21.2.x and 20.3.x depend on @modelcontextprotocol/sdk@1.30.0 which is vulnerable to CVE-2026-104850

2 participants