fix: consolidate MCP maintenance and drift checks - #26
Merged
Conversation
The generated catalog is only drift-proof if regeneration actually runs. Re-run gen:api-list in CI and diff — a tool-definition change that forgets 'npm run gen:api-list' now fails the build with a fix-it message instead of shipping a stale catalog (which is exactly what almost happened this release). Verified idempotent locally (regen on a fresh tree produces no diff). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
jj5419952-stack
approved these changes
Jul 17, 2026
Add isValidTronAddress helper and tests so MCP callers can pass either Base58 or 41/0x hex encodings.
- Pin the transitive Axios override to the first patched 1.x release.\n- Refresh the lockfile to remove GHSA-gcfj-64vw-6mp9.
- Derive the MCP server version from package.json instead of a stale constant. - Verify package, lockfile, README, and API catalog versions stay aligned.
- Upgrade Hono, fast-uri, Axios, and adapter dependency overrides\n- Pin compatible body-parser fixes for Express 4 and 5\n- Add a weekly production dependency audit to CI
bbsyaya
approved these changes
Jul 22, 2026
1 task
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Consolidates the pending MCP maintenance work into one branch:
npm run gen:api-listin CI and fail with a fix-it message whenmcp-api-list.mdis stale.41..., and0x...TRON address encodings inresolveAddress, with regression coverage (reviewed from fix(address): accept hex TRON addresses in resolveAddress #28).1.18.0, removing GHSA-gcfj-64vw-6mp9 from the dependency tree (consolidated from fix(deps): upgrade axios to patched 1.18.0 #29).package.jsonand test that package, lockfile, README, and API catalog versions remain aligned.Validation:
npm test: 477 passed, 19 skippednpm run buildnpm run gen:api-listproduces no diff