bharatstock-mcp 0.2.1 → 0.2.2

package/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 All notable changes to `bharatstock-mcp` are documented here (newest first).
 
+## 0.2.2 (2026-11-15)
+- Security maintenance: updated `@modelcontextprotocol/sdk` to ^1.32.2 (fixes the OAuth credential-binding, cross-session task access and request-size/DoS advisories), `zod` to ^4.6.7, and refreshed transitive dependencies (hono, body-parser, qs, fast-uri, ip-address). `npm audit` reports 0 vulnerabilities. No change to the tool surface or behaviour.
 ## 0.2.1 (2026-11-06)
 - Maintenance release. No change to the tool surface or behaviour.
 

package/README.md

@@ -127,6 +127,7 @@ This server is a thin layer over the official [`bharatstock`](https://www.npmjs.
 MIT
 
 ## Changelog
+- **0.2.2** (2026-11-15): security maintenance: updated `@modelcontextprotocol/sdk` to ^1.32.2 (fixes the OAuth credential-binding, cross-session task access and request-size/DoS advisories), `zod` to ^4.6.7, and refreshed transitive dependencies (hono, body-parser, qs, fast-uri, ip-address). `npm audit` reports 0 vulnerabilities. No change to the tool surface or behaviour.
 
 - **0.2.1** (2026-11-06): maintenance release. No change to the tool surface or behaviour.
 - **0.1.5** (2026-11-03): broadened the registry/npm listing metadata — a keyword-rich `description` and expanded `keywords` (NSE, BSE, NIFTY, SENSEX, mutual funds, shareholding, FII/DII, corporate actions, screener, Indian equities) so the server is easier to find. No tool/schema change.

package/dist/{chunk-AQVPTO4U.js → chunk-PWPXQCNU.js}

@@ -43,7 +43,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { BharatStock } from "bharatstock";
 import { z } from "zod";
 var SERVER_NAME = "bharatstock";
-var SERVER_VERSION = "0.2.1";
+var SERVER_VERSION = "0.2.2";
 async function run(fn) {
   try {
     const data = await fn();

package/dist/http.js

@@ -2,7 +2,7 @@
 import {
   buildServer,
   checkAuthorization
-} from "./chunk-AQVPTO4U.js";
+} from "./chunk-PWPXQCNU.js";
 
 // src/http.ts
 import { randomUUID } from "crypto";

package/dist/index.d.ts

@@ -14,7 +14,7 @@ import { BharatStockOptions } from 'bharatstock';
  */
 
 declare const SERVER_NAME = "bharatstock";
-declare const SERVER_VERSION = "0.2.1";
+declare const SERVER_VERSION = "0.2.2";
 /**
  * Construct the MCP server and register all tools against a BharatStock
  * client. Exposed separately from the stdio wiring so tests can build a

package/dist/index.js

@@ -4,7 +4,7 @@ import {
   SERVER_VERSION,
   buildServer,
   checkAuthorization
-} from "./chunk-AQVPTO4U.js";
+} from "./chunk-PWPXQCNU.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bharatstock-mcp",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "mcpName": "com.bharatstockapi/bharatstock-mcp",
   "description": "Official Model Context Protocol (MCP) server for the BharatStock API - Indian stock market data (NSE/BSE) as AI-agent tools: real-time quotes, EOD prices, financial statements, ratios, shareholding patterns (FII/DII/promoter), corporate actions, NIFTY/SENSEX indices, mutual fund holdings and NAVs, FII/DII activity, bulk/block deals, insider trades, and a fundamentals stock screener for Indian equities.",
   "license": "MIT",
@@ -54,13 +54,13 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@modelcontextprotocol/sdk": "^1.32.2",
     "bharatstock": "^0.1.12",
-    "zod": "^3.23.8"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
-    "tsup": "^8.0.2",
+    "tsup": "^9.0.0",
     "typescript": "^5.5.4",
     "vitest": "^5.0.0"
   }