From fa78edca0b6bc04ab00ddf5694d855f1b946b87d Mon Sep 17 00:00:00 2001 From: semantic-release Date: Mon, 15 Dec 2025 17:07:19 +0000 Subject: [PATCH] chore(release): 9.8.2 Automatically generated by python-semantic-release --- CHANGELOG.md | 22 ++++++++++++++++++++++ pyproject.toml | 2 +- 2 files changed, 23 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5f6058f..000a747 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,28 @@ +## v9.8.2 (2025-12-15) + +### Bug Fixes + +- Allow home subdirectories through is_dangerous_path() + ([`e5548ac`](https://github.com/BeehiveInnovations/pal-mcp-server/commit/e5548acb984ca4f8b2ae8381f879a0285094257f)) + +- Path traversal vulnerability - use prefix matching in is_dangerous_path() + ([`9ed15f4`](https://github.com/BeehiveInnovations/pal-mcp-server/commit/9ed15f405a9462b4db7aa44ca2d989e092c008e4)) + +- Use Path.is_relative_to() for cross-platform dangerous path detection + ([`91ffb51`](https://github.com/BeehiveInnovations/pal-mcp-server/commit/91ffb51564e5655ec91111938039ed81e0d8e4c6)) + +- **security**: Handle macOS symlinked system dirs + ([`ba08308`](https://github.com/BeehiveInnovations/pal-mcp-server/commit/ba08308a23d1c1491099c5d0eae548077bd88f9f)) + +### Chores + +- Sync version to config.py [skip ci] + ([`c492735`](https://github.com/BeehiveInnovations/pal-mcp-server/commit/c4927358720277efa0373b339bd8e06ee06498d0)) + + ## v9.8.1 (2025-12-15) ### Bug Fixes diff --git a/pyproject.toml b/pyproject.toml index 4569231..c60506d 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "pal-mcp-server" -version = "9.8.1" +version = "9.8.2" description = "AI-powered MCP server with multiple model providers" requires-python = ">=3.9" dependencies = [