just-bash-mcp 2.9.4 → 2.9.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +17 -1
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -9,7 +9,7 @@ Execute bash commands in a secure, isolated environment with an in-memory virtua
9
9
 
10
10
  Built on top of [`just-bash`](https://github.com/vercel-labs/just-bash) v2.12.5.
11
11
 
12
- ## What's New in v2.9.4
12
+ ## What's New in v2.9.5
13
13
 
14
14
  - **Synced with upstream `just-bash` v2.12.5** - Full upstream commands, APIs, and type exports
15
15
  - **Persistent sandbox tools** - `bash_sandbox_*` tools remain available for higher-level isolated workflows
@@ -28,6 +28,22 @@ Built on top of [`just-bash`](https://github.com/vercel-labs/just-bash) v2.12.5.
28
28
  - **MountableFS Support**: Mount multiple filesystems at different paths
29
29
  - **ReadWriteFS Support**: Direct read-write access to real directories
30
30
 
31
+ ## Synced Upstream Features
32
+
33
+ The current wrapper release tracks `just-bash` `v2.12.5`, which brings in the post-`v2.10.2` upstream feature set, including:
34
+
35
+ - Defense-in-depth hardening across the runtime and filesystem layers
36
+ - Defense-in-depth enabled by default upstream, plus additional hardening passes
37
+ - Filesystem hardening for overlays, external filesystems, symlinks, and broken symlink handling
38
+ - Virtualized PID and shell security invariant improvements
39
+ - Updated `Sandbox.runCommand()` signature compatibility
40
+ - Python runtime migration from Pyodide to emscripten CPython
41
+ - Follow-up Python runtime hardening and cleanup
42
+ - UTF-8 handling and write-path fixes
43
+ - CommonJS compatibility improvements upstream
44
+ - `ls -F` / `--classify` support
45
+ - Additional cleanup and internal hardening work shipped through `v2.12.5`
46
+
31
47
  ## Installation
32
48
 
33
49
  ### From npm (recommended)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "just-bash-mcp",
3
- "version": "2.9.4",
3
+ "version": "2.9.5",
4
4
  "description": "MCP server providing a sandboxed bash environment using just-bash",
5
5
  "type": "module",
6
6
  "main": "./src/index.ts",