@pascalcouturier/skill-builder-mcp 3.1.0 → 3.1.1

package/CHANGELOG.md

@@ -9,6 +9,16 @@ The install line names the major version (`@3`), so restarting your AI tool or i
 fetches the newest release of that major (see **Updating** in the
 [README](./README.md#updating)).
 
+## 3.1.1
+
+Security update. Same protocol, same tools, same install line (`@3`): restarting your AI tool
+picks it up.
+
+- Updates the bundled MCP SDK from 1.31.0 to 1.32.1, which fixes two published advisories
+  (tasks not tied to the session that created them, and cross-origin redirects that re-sent
+  headers and bodies). The connector only talks to Skill Builder over a local connection, so the
+  exposure was low, but it ships that code.
+
 ## 3.1.0
 
 Same protocol and tools; the install line stays `@3`, so restarting your AI tool picks it up.

package/SECURITY.md

@@ -128,9 +128,9 @@ commands, edit files). Treat any tool's output as untrusted, including this one'
 
 ```bash
 # What it contains, and its checksum
-npm pack @pascalcouturier/skill-builder-mcp@3.1.0
-tar -tzf pascalcouturier-skill-builder-mcp-3.1.0.tgz
-npm view @pascalcouturier/skill-builder-mcp@3.1.0 dist.integrity
+npm pack @pascalcouturier/skill-builder-mcp@3.1.1
+tar -tzf pascalcouturier-skill-builder-mcp-3.1.1.tgz
+npm view @pascalcouturier/skill-builder-mcp@3.1.1 dist.integrity
 
 # That the registry signed it (in a project that installs it)
 npm audit signatures
@@ -152,7 +152,7 @@ the approved GitHub Actions workflow (no npm token exists).
 
 This means a release reaches you without you reviewing it first. If you want to review each one
 (for example in a company), put an exact version after the `@` in your AI tool's settings, such as
-`@3.1.0`, and update it yourself; Skill Builder still shows when your connector is out of date.
+`@3.1.1`, and update it yourself; Skill Builder still shows when your connector is out of date.
 Use the commands above to look at any release before you run it.
 
 ## Reporting a problem

package/dist/cli.js

@@ -7845,7 +7845,7 @@ var StdioServerTransport = class {
 };
 var package_default = {
 	name: "@pascalcouturier/skill-builder-mcp",
-	version: "3.1.0",
+	version: "3.1.1",
 	description: "Connect AI tools (GitHub Copilot, Claude Code, Codex, Cursor, Claude Desktop) to Skill Builder open in your browser, over MCP.",
 	license: "MIT",
 	author: "Pascal Couturier (https://pascalcouturier.com)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pascalcouturier/skill-builder-mcp",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "Connect AI tools (GitHub Copilot, Claude Code, Codex, Cursor, Claude Desktop) to Skill Builder open in your browser, over MCP.",
   "license": "MIT",
   "author": "Pascal Couturier (https://pascalcouturier.com)",