keyshot-mcp 0.12.0 → 0.12.1

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to KeyShot MCP are documented in this file.
 
 ## [Unreleased]
 
+## [0.12.1] - 2026-09-02
+
+### Security
+
+- Updated the MCP SDK dependency baseline to pull patched Hono, Hono Node
+  server, `fast-uri`, and `ip-address` runtime dependencies.
+- Refreshed the development lockfile to use patched PostCSS and Nano ID releases.
+
+### Changed
+
+- Updated the Node.js and Python setup actions used by CI and release workflows.
+- CI and release validation now reject high-severity dependency vulnerabilities.
+
 ## [0.12.0] - 2026-09-01
 
 ### Added
@@ -55,7 +68,8 @@ All notable changes to KeyShot MCP are documented in this file.
 
 - Documented that scene metadata and preview images may be sent by an MCP client to its configured model provider.
 
-[Unreleased]: https://github.com/truman-t3/keyshot-mcp/compare/v0.12.0...HEAD
+[Unreleased]: https://github.com/truman-t3/keyshot-mcp/compare/v0.12.1...HEAD
+[0.12.1]: https://github.com/truman-t3/keyshot-mcp/compare/v0.12.0...v0.12.1
 [0.12.0]: https://github.com/truman-t3/keyshot-mcp/compare/v0.11.0...v0.12.0
 [0.11.0]: https://github.com/truman-t3/keyshot-mcp/compare/v0.10.0...v0.11.0
 [0.10.0]: https://github.com/truman-t3/keyshot-mcp/compare/v0.9.1...v0.10.0

package/README.md

@@ -71,9 +71,9 @@ The easiest setup is to send this prompt to an agent that can edit your MCP
 configuration:
 
 ```text
-Install KeyShot MCP 0.12.0 and configure it in my MCP client.
+Install KeyShot MCP 0.12.1 and configure it in my MCP client.
 
-1. Use: npx -y keyshot-mcp@0.12.0
+1. Use: npx -y keyshot-mcp@0.12.1
 2. Find my local keyshot_headless.exe and set KEYSHOT_HEADLESS_EXE to its full path.
 3. Keep outputs in the default KeyShot MCP Outputs folder unless I choose another safe folder.
 4. Keep KEYSHOT_ALLOW_EXTERNAL_OUTPUTS disabled.
@@ -133,7 +133,7 @@ folder, show me a preview, and do not overwrite the original scene.
 
 ### Install
 
-The current release is `0.12.0`.
+The current release is `0.12.1`.
 
 #### Run with npx
 
@@ -144,7 +144,7 @@ No global npm installation is required:
   "mcpServers": {
     "keyshot": {
       "command": "npx",
-      "args": ["-y", "keyshot-mcp@0.12.0"],
+      "args": ["-y", "keyshot-mcp@0.12.1"],
       "env": {
         "KEYSHOT_HEADLESS_EXE": "C:/Program Files/KeyShot Studio/bin/keyshot_headless.exe"
       }
@@ -156,7 +156,7 @@ No global npm installation is required:
 #### Install globally
 
 ```bash
-npm install -g keyshot-mcp@0.12.0
+npm install -g keyshot-mcp@0.12.1
 ```
 
 ```json
@@ -409,9 +409,9 @@ KeyShot MCP 在本机处理 KeyShot 文件；但 MCP 客户端可能会把工具
 最简单的安装方式，是把下面这段话发给能够修改 MCP 配置的 Agent：
 
 ```text
-请安装 KeyShot MCP 0.12.0，并配置到我的 MCP 客户端。
+请安装 KeyShot MCP 0.12.1，并配置到我的 MCP 客户端。
 
-1. 使用：npx -y keyshot-mcp@0.12.0
+1. 使用：npx -y keyshot-mcp@0.12.1
 2. 查找本机 keyshot_headless.exe，并把完整路径设置为 KEYSHOT_HEADLESS_EXE。
 3. 默认把结果保存在“文档/KeyShot MCP Outputs”，除非我明确选择其他安全目录。
 4. 保持 KEYSHOT_ALLOW_EXTERNAL_OUTPUTS 关闭。
@@ -464,7 +464,7 @@ KeyShot MCP 在本机处理 KeyShot 文件；但 MCP 客户端可能会把工具
 
 ### 安装
 
-当前正式版本为 `0.12.0`。
+当前正式版本为 `0.12.1`。
 
 #### 使用 npx 免安装运行
 
@@ -473,7 +473,7 @@ KeyShot MCP 在本机处理 KeyShot 文件；但 MCP 客户端可能会把工具
   "mcpServers": {
     "keyshot": {
       "command": "npx",
-      "args": ["-y", "keyshot-mcp@0.12.0"],
+      "args": ["-y", "keyshot-mcp@0.12.1"],
       "env": {
         "KEYSHOT_HEADLESS_EXE": "C:/Program Files/KeyShot Studio/bin/keyshot_headless.exe"
       }
@@ -485,7 +485,7 @@ KeyShot MCP 在本机处理 KeyShot 文件；但 MCP 客户端可能会把工具
 #### 全局安装
 
 ```bash
-npm install -g keyshot-mcp@0.12.0
+npm install -g keyshot-mcp@0.12.1
 ```
 
 ```json

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "0.12.0";
+export const VERSION = "0.12.1";

package/lhm.plugin.json

@@ -2386,5 +2386,5 @@
       }
     }
   ],
-  "version": "0.12.0"
+  "version": "0.12.1"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "keyshot-mcp",
-  "version": "0.12.0",
+  "version": "0.12.1",
   "mcpName": "io.github.truman-t3/keyshot-mcp",
   "description": "Local MCP server for KeyShot product visualization, scene editing, camera control, and rendering.",
   "type": "module",
@@ -72,7 +72,7 @@
   },
   "packageManager": "pnpm@10.17.1",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.18.1",
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^3.25.76"
   },
   "devDependencies": {

package/server.json

@@ -9,12 +9,12 @@
     "url": "https://github.com/truman-t3/keyshot-mcp",
     "source": "github"
   },
-  "version": "0.12.0",
+  "version": "0.12.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "keyshot-mcp",
-      "version": "0.12.0",
+      "version": "0.12.1",
       "transport": {
         "type": "stdio"
       },

package/skills/keyshot-mcp/SKILL.md

@@ -2,7 +2,7 @@
 name: keyshot-mcp
 author: truman-t3
 description: Install, diagnose, and safely use KeyShot MCP for local product visualization, scene editing, camera control, material assignment, and rendering.
-version: 0.12.0
+version: 0.12.1
 ---
 
 # KeyShot MCP
@@ -35,7 +35,7 @@ Respond in the user's language and explain errors in plain, non-technical terms.
 1. Confirm Node.js 20 or newer is available.
 2. Confirm KeyShot is installed and locally licensed.
 3. Locate `keyshot_headless.exe`. Prefer its absolute path.
-4. Configure the MCP client to run `npx -y keyshot-mcp@0.12.0` and set
+4. Configure the MCP client to run `npx -y keyshot-mcp@0.12.1` and set
    `KEYSHOT_HEADLESS_EXE`.
 5. Leave `KEYSHOT_OUTPUT_DIR` unset to use
    `<home>/Documents/KeyShot MCP Outputs`, or set a user-approved directory.
@@ -50,7 +50,7 @@ Example configuration:
   "mcpServers": {
     "keyshot": {
       "command": "npx",
-      "args": ["-y", "keyshot-mcp@0.12.0"],
+      "args": ["-y", "keyshot-mcp@0.12.1"],
       "env": {
         "KEYSHOT_HEADLESS_EXE": "C:/Program Files/KeyShot Studio/bin/keyshot_headless.exe"
       }