sdlc-agent-4-enterprise-server 1.55.10 → 1.55.12

package/Dockerfile

@@ -127,6 +127,11 @@ ARG SETUPTOOLS_VERSION=84.0.0
 # (same PEP 440 pattern documented below). Probes fail the build on drift.
 ARG CERTIFI_VERSION=2026.10.19
 ARG PILLOW_VERSION=13.0.0
+# pypdf — transitive of markdown-exporter-mcp-local. 6.21.3 (upstream-resolved)
+# carries CVE-2026-119203 / CVE-2026-119204 / CVE-2026-119205 (HIGH, DoS), all
+# fixed in 6.21.4. Force-upgraded after the main install with a version probe
+# (same pattern as pillow/certifi above) so a regression fails the build.
+ARG PYPDF_VERSION=6.21.4
 # `python3` already exists in base (build toolchain); only the venv/ensurepip
 # support is missing. One venv per server: independent dependency trees that
 # are pinned, upgraded and Trivy-scanned separately.
@@ -163,8 +168,8 @@ RUN python3 -m venv /opt/markdown-exporter-venv \
       "mcp>=1.27.0,<2.0.0" \
  && test -x /opt/markdown-exporter-venv/bin/markdown-exporter-mcp-local \
  && /opt/markdown-exporter-venv/bin/python -c "import markdown_exporter_mcp.server, md_exporter" \
- && /opt/markdown-exporter-venv/bin/pip install --no-cache-dir "pillow==${PILLOW_VERSION}" "certifi==${CERTIFI_VERSION}" \
- && /opt/markdown-exporter-venv/bin/python -c "from importlib.metadata import version; assert version('pillow') == '${PILLOW_VERSION}' and version('certifi') == '${CERTIFI_VERSION}'" \
+ && /opt/markdown-exporter-venv/bin/pip install --no-cache-dir "pillow==${PILLOW_VERSION}" "certifi==${CERTIFI_VERSION}" "pypdf==${PYPDF_VERSION}" \
+ && /opt/markdown-exporter-venv/bin/python -c "from importlib.metadata import version; assert version('pillow') == '${PILLOW_VERSION}' and version('certifi') == '${CERTIFI_VERSION}' and version('pypdf') == '${PYPDF_VERSION}'" \
  && /opt/markdown-exporter-venv/bin/pip install --no-cache-dir "setuptools==${SETUPTOOLS_VERSION}" \
  && /opt/markdown-exporter-venv/bin/python -c "from importlib.metadata import version; assert version('setuptools') == '${SETUPTOOLS_VERSION}'" \
  && /opt/markdown-exporter-venv/bin/python -m pip uninstall -y pip

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-1.55.10-blue?style=for-the-badge" alt="Version">
+  <img src="https://img.shields.io/badge/version-1.55.12-blue?style=for-the-badge" alt="Version">
   <img src="https://img.shields.io/badge/tools-66+-teal?style=for-the-badge" alt="Tools">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green?style=for-the-badge" alt="Node">
 </p>
@@ -38,7 +38,7 @@ Server starts at **http://localhost:48721**. Verify it's running:
 
 ```bash
 curl http://localhost:48721/health
-# → {"status":"healthy","version":"1.53.0","uptime":5,"tools_loaded":52}
+# → {"status":"healthy","version":"1.55.12","uptime":5,"tools_loaded":52}
 ```
 
 ### Development Mode (auto-reload)
@@ -233,6 +233,7 @@ The embedding model is expected at `.code-intel/models/model.onnx`. Download it:
 
 | Version | Date | Ticket | Changes |
 |---------|------|--------|---------|
+| 1.55.12 | 2026-10-31 | SA4E-389/390 | Multi LLM Configuration Profiles + Chat model/provider switcher (L3 to UAT). Version sync root/`backend`/`extension` → `1.55.12`. |
 | 1.55.3 | 2026-10-23 | SA4E-380 | Content Proxy for child MCP tools — backend `content-proxy/` layer: convention detection + overrides, in-place schema adaptation, invocation adaptation (strict base64), transport-agnostic artifact retrieval (25 MB cap), multi-file `outputs[]`, host-path stripping; zero new tools. Extension output-proxy fail-loud. Backend content-proxy tests 21/21; live 6/6 exporters. Docs: BRD/FSD/TDD/STP/STC/SECURITY-REVIEW (F-01 binding). |
 | 1.55.2 | 2026-10-23 | SA4E-369 | Fix: Pega config save reverts to default — `updatePegaConfig` uses new dotted keys (`pega.endpoint`, `pega.username`); `WORKSPACE_SCOPED_KEYS` + tests updated. |
 | 1.55.1 | 2026-10-23 | SA4E-369 | Unified config reads — ALL reads via `getSetting` (zero direct `config.get`); one-time migration runner; runtime fallback removed. 3,247/3,247 pass. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sdlc-agent-4-enterprise-server",
-  "version": "1.55.10",
+  "version": "1.55.12",
   "description": "Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration",
   "main": "dist/index.js",
   "bin": {