fix(security): bump fastmcp to >=3.2.4,<4 + clear all open Dependabot advisories (closes #35)#50

Merged

raffelino merged 5 commits into

mainfrom

fix/gh-35-bump-fastmcp-3

Jun 17, 2026

Commits on Jun 15, 2026

fix(deps): bump fastmcp to >=3.2.4,<4 to close 3 fastmcp 2.x CVEs (#35)

raffelino
and
claude
committed
fix(security): patch all remaining Dependabot advisories (#35 sweep)

raffelino
and
claude
committed

Commits on Jun 16, 2026

chore(extension): standardize on npm, drop yarn.lock

raffelino
and
claude
committed
fix(security): bump dompurify to >=3.4.9 (XSS advisories)

raffelino
and
claude
committed

Commits on Jun 17, 2026

feat(flow-editor, stats, ai): control-structure authoring, even stats axis, localized + auto-applied AI fixes

raffelino
and
claude
committed