Joao Moura 2fd91b6ba4 fix(deps): raise mcp floor past session-auth and websocket advisories ...

mcp 1.26.0 has GHSA-hvrp-rf83-w775 and GHSA-jpw9-pfvf-9f58 (fixed in
1.27.2) plus GHSA-vj7q-gjh5-988w (fixed in 1.28.1); the ~=1.26.0 pin
blocked all three patches. Raise to >=1.28.1,<2 (locks 1.28.1) and
extend the pin guardrail tests.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-16 21:47:37 -07:00

..

cli

feat: bump versions to 1.15.3 (#6576)

2026-07-16 19:26:14 +00:00

crewai

fix(deps): raise mcp floor past session-auth and websocket advisories

2026-07-16 21:47:37 -07:00

crewai-core

feat: bump versions to 1.15.3 (#6576)

2026-07-16 19:26:14 +00:00

crewai-files

feat: bump versions to 1.15.3 (#6576)

2026-07-16 19:26:14 +00:00

crewai-tools

feat: bump versions to 1.15.3 (#6576)

2026-07-16 19:26:14 +00:00

devtools

feat: bump versions to 1.15.3 (#6576)

2026-07-16 19:26:14 +00:00