Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 5, 2025

This PR contains the following updates:

Package Type Update Change
go (source) toolchain patch 1.25.3 -> 1.25.4

Release Notes

golang/go (go)

v1.25.4


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Nov 5, 2025
@github-actions
Copy link

github-actions bot commented Nov 5, 2025

🔒 MCP Security Scan Results

✅ adb-mysql-mcp-server

  • Status: Passed
  • Tools scanned: 3
  • Result: No security issues detected

✅ agentql-mcp

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ arxiv-mcp-server

  • Status: Passed
  • Tools scanned: 4
  • Result: No security issues detected

✅ astra-db-mcp

  • Status: Passed
  • Tools scanned: 16
  • Result: No security issues detected

✅ aws-diagram

  • Status: Passed
  • Tools scanned: 3
  • Result: No security issues detected

✅ aws-documentation

  • Status: Passed
  • Tools scanned: 3
  • Result: No security issues detected

✅ blender-mcp

  • Status: Passed
  • Tools scanned: 17
  • Result: No security issues detected

✅ brightdata-mcp

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ browserbase-mcp-server

  • Status: Passed
  • Tools scanned: 8
  • Result: No security issues detected

✅ chroma-mcp

  • Status: Passed
  • Tools scanned: 13
  • Result: No security issues detected

✅ context7

  • Status: Passed
  • Tools scanned: 2
  • Result: No security issues detected

✅ graphlit-mcp-server

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ heroku-mcp-server

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ ida-pro-mcp

  • Status: Passed
  • Tools scanned: 48
  • Result: No security issues detected

✅ launchdarkly-mcp-server

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ magic-mcp

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ mcp-clickhouse

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ mcp-jetbrains

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ mcp-neo4j-aura-manager

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ mcp-neo4j-cypher

  • Status: Passed
  • Tools scanned: 3
  • Result: No security issues detected

✅ mcp-neo4j-memory

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ mcp-server-box

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ mcp-server-circleci

  • Status: Passed
  • Tools scanned: 16
  • Result: No security issues detected

✅ mcp-server-neon

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ netbird

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ notion

  • Status: Passed
  • Tools scanned: 19
  • Result: No security issues detected

✅ onchain-mcp

  • Status: Passed
  • Tools scanned: 10
  • Result: No security issues detected

✅ phoenix-mcp

  • Status: Passed
  • Tools scanned: 19
  • Result: No security issues detected

❌ playwright-mcp

  • Status: Failed
  • Tools scanned: 21
  • Vulnerabilities found: 1

Security issues detected:

  • [E001] Malicious input detected within the tool documentation.

Allowed issues (not blocking):

  • [TF001] Data leak toxic flow detected. The same agent has access to at least one tool that produces untrusted content, one tool that can access private data, and one tool that can behave as a public sink. For more information, see https://explorer.invariantlabs.ai/docs/mcp-scan/issue-code-reference/#TF001 (Allowed: Data leak risk acceptable - tool designed for browser automation and web testing workflows where external content interaction is essential. Users should be aware of potential data exposure when automating web interactions.)
  • [TF002] Destructive toxic flow detected. The same agent has access to at least one tool that produces untrusted content and one tool that can behave destructively. For more information, see https://explorer.invariantlabs.ai/docs/mcp-scan/issue-code-reference/#TF002 (Allowed: Destructive flow risk acceptable - browser automation tools are core functionality for web testing and automation. Users should only use with trusted prompts and on non-production systems.)

✅ sentry-mcp-server

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ supabase-mcp-server

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

✅ tavily-mcp

  • Status: Passed
  • Tools scanned: 0
  • Result: No security issues detected

Summary: Scanned 32 MCP server(s), found 1 security issue(s).

⚠️ Action Required: Security issues were detected. Please review and address them before merging.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant