[Zechereh]

Fixed

Package	Old → New	Advisories	Severity
proxy-addr	2.0.7 → 2.0.8	GHSA-jqcg-44mw-7w3h	Critical
@modelcontextprotocol/sdk	1.30.0 → 1.32.1	GHSA-6qxp-vccf-f47h	High
source-map-js (dev)	1.2.1 → 1.2.2	GHSA-68fv-2mgg-jv7q	High
brace-expansion (dev)	5.0.9 → 5.0.12	GHSA-6j4f-fj2g-mc7p, GHSA-qhr7-859c-m2p7, GHSA-q2hr-2g5m-vwhr	High/Medium
ip-address	10.4.0 → 10.7.3	GHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q	Medium
hono	4.13.5 → 4.13.13	GHSA-hxh3-vqpv-xpqv	Medium

These also close all 6 open Dependabot alerts.

Code changes for breaking upgrades

None. Every update stays within the declared version range, so only the lock file changed.

Overrides or constraints added

None.

SAST findings not fixed

• github-actions-mutable-action-tag: 4 in .github/workflows/ci.yml and 2 in release.yml (actions/checkout@v4, actions/setup-node@v4). The security team owns .github/workflows/, so these are listed rather than fixed. Pinning those actions to commit SHAs would clear them.

Verification

• osv-scanner: no issues found (was 11)
• npm audit: 0 vulnerabilities
• semgrep 1.174.0: only the 6 workflow findings above
• tests: build ✓, lint ✓, vitest 158/158 ✓

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

💤 Files selected but had no reviewable changes (1)

• osv-scanner.toml

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: e3d99f7c-7d3b-4de1-9924-61d5d692ec1a

📥 Commits

Reviewing files that changed from the base of the PR and between 0367ec0 and e9d4938.

📒 Files selected for processing (1)

• osv-scanner.toml

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}