From edc3d2df03e39c35973252e593321cceac5f4946 Mon Sep 17 00:00:00 2001 From: u8array Date: Mon, 19 Oct 2026 19:47:09 +0200 Subject: [PATCH 1/2] chore(deps): the attribution pins one of miniz_oxide's two MIT files --- src-tauri/THIRD-PARTY-LICENSES-RUST.md | 1 - src-tauri/about.toml | 10 ++++++++++ 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/src-tauri/THIRD-PARTY-LICENSES-RUST.md b/src-tauri/THIRD-PARTY-LICENSES-RUST.md index f7213ac4..4b6822d1 100644 --- a/src-tauri/THIRD-PARTY-LICENSES-RUST.md +++ b/src-tauri/THIRD-PARTY-LICENSES-RUST.md @@ -6048,7 +6048,6 @@ Copyright 2010-2014 Rich Geldreich and Tenacious Software LLC Copyright (c) 2017 Frommi Copyright (c) 2017-2024 oyvindln - Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights diff --git a/src-tauri/about.toml b/src-tauri/about.toml index 8a3d93ca..bb4260de 100644 --- a/src-tauri/about.toml +++ b/src-tauri/about.toml @@ -29,3 +29,13 @@ accepted = [ "MPL-2.0", "CDLA-Permissive-2.0", ] + +# miniz_oxide ships the MIT text twice, LICENSE and LICENSE-MIT.md, differing by one +# blank line. Harvesting picks either, so Windows and Linux runs disagreed. Pin one. +[miniz_oxide.clarify] +license = "MIT" + +[[miniz_oxide.clarify.files]] +path = "LICENSE-MIT.md" +license = "MIT" +checksum = "799e9ca9d179295ef372f25d3769cdda7d25bb2668add6a6a1e22d1e4c678b8d" From dd7ea6751847e0021bea1859404aa9070fb99034 Mon Sep 17 00:00:00 2001 From: u8array Date: Mon, 19 Oct 2026 17:31:24 +0200 Subject: [PATCH 2/2] chore(deps): bump the MCP SDK and zod --- THIRD-PARTY-LICENSES.md | 2 +- packages/core/package.json | 2 +- packages/mcp-server/package.json | 4 ++-- pnpm-lock.yaml | 31 +++++++++++++------------------ 4 files changed, 17 insertions(+), 22 deletions(-) diff --git a/THIRD-PARTY-LICENSES.md b/THIRD-PARTY-LICENSES.md index b77b3882..357e24ec 100644 --- a/THIRD-PARTY-LICENSES.md +++ b/THIRD-PARTY-LICENSES.md @@ -3923,7 +3923,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ``` -### zod 4.6.5 +### zod 4.6.7 - License: MIT - Author: Colin McDonnell diff --git a/packages/core/package.json b/packages/core/package.json index 2a41964e..6f8ce203 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -20,7 +20,7 @@ "dependencies": { "bwip-js": "^4.11.4", "fflate": "^0.8.3", - "zod": "^4.6.5" + "zod": "^4.6.7" }, "devDependencies": { "vitest": "^4.1.11" diff --git a/packages/mcp-server/package.json b/packages/mcp-server/package.json index e2adbb09..155a6706 100644 --- a/packages/mcp-server/package.json +++ b/packages/mcp-server/package.json @@ -9,10 +9,10 @@ "smoke:sea": "node scripts/smoke-sea.mjs" }, "dependencies": { - "@modelcontextprotocol/sdk": "^1.32.0", + "@modelcontextprotocol/sdk": "^1.32.1", "@zplab/core": "workspace:*", "bwip-js": "^4.11.4", - "zod": "^4.6.5" + "zod": "^4.6.7" }, "devDependencies": { "esbuild": "^0.28.2", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 4a526de5..79582f23 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -196,8 +196,8 @@ importers: specifier: ^0.8.3 version: 0.8.3 zod: - specifier: ^4.6.5 - version: 4.6.5 + specifier: ^4.6.7 + version: 4.6.7 devDependencies: vitest: specifier: ^4.1.11 @@ -206,8 +206,8 @@ importers: packages/mcp-server: dependencies: '@modelcontextprotocol/sdk': - specifier: ^1.32.0 - version: 1.32.0(zod@4.6.5) + specifier: ^1.32.1 + version: 1.32.1(zod@4.6.7) '@zplab/core': specifier: workspace:* version: link:../core @@ -215,8 +215,8 @@ importers: specifier: ^4.11.4 version: 4.11.4 zod: - specifier: ^4.6.5 - version: 4.6.5 + specifier: ^4.6.7 + version: 4.6.7 devDependencies: esbuild: specifier: ^0.28.2 @@ -777,8 +777,8 @@ packages: '@marijn/find-cluster-break@1.0.4': resolution: {integrity: sha512-Wy0V7+SGUjnF9/TkiM1hKVDPj7jKXduPNboMVtHTA8dySMURWqfg/JZ9E2Sq8JgSJmkl7k7Qe9FLeMSrSraWmQ==} - '@modelcontextprotocol/sdk@1.32.0': - resolution: {integrity: sha512-8BviX/hK4Gd2eL1KdTwm0gfl4d3wdoErW0Jd00h6nomUAtk6IJk5vwQJc6kfWtJTzN5OEV/lgIiJKI8fiDGAlA==} + '@modelcontextprotocol/sdk@1.32.1': + resolution: {integrity: sha512-2DdE+SJDtzLEEWzY1ZjY7Q+VcPhcV1KisD3zI4u0XZyktsjHum1mwbMI+JaulUBi2OZk+KJAi2uPXzxichPkdw==} engines: {node: '>=18'} peerDependencies: '@cfworker/json-schema': ^4.1.1 @@ -2806,9 +2806,6 @@ packages: peerDependencies: zod: ^3.25.0 || ^4.0.0 - zod@4.6.5: - resolution: {integrity: sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==} - zod@4.6.7: resolution: {integrity: sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==} @@ -3371,7 +3368,7 @@ snapshots: '@marijn/find-cluster-break@1.0.4': {} - '@modelcontextprotocol/sdk@1.32.0(zod@4.6.5)': + '@modelcontextprotocol/sdk@1.32.1(zod@4.6.7)': dependencies: '@hono/node-server': 2.1.3(hono@4.13.12) ajv: 8.20.0 @@ -3388,8 +3385,8 @@ snapshots: json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 raw-body: 3.0.2 - zod: 4.6.5 - zod-to-json-schema: 3.25.2(zod@4.6.5) + zod: 4.6.7 + zod-to-json-schema: 3.25.2(zod@4.6.7) transitivePeerDependencies: - supports-color @@ -5209,16 +5206,14 @@ snapshots: yocto-queue@0.1.0: {} - zod-to-json-schema@3.25.2(zod@4.6.5): + zod-to-json-schema@3.25.2(zod@4.6.7): dependencies: - zod: 4.6.5 + zod: 4.6.7 zod-validation-error@4.0.2(zod@4.6.7): dependencies: zod: 4.6.7 - zod@4.6.5: {} - zod@4.6.7: {} zundo@2.3.0(zustand@5.0.15(@types/react@19.3.0)(react@19.3.1)(use-sync-external-store@1.7.0(react@19.3.1))):