From 28b177be2420854fd7c26fb5cb8509936df31607 Mon Sep 17 00:00:00 2001 From: Logan Rosen Date: Tue, 21 Jul 2026 19:01:53 -0400 Subject: [PATCH 1/2] build: require Go 1.25.12 Ensure setup-go and GoReleaser use the patched Go toolchain for release binaries. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 0b2aa497-b47d-464a-b132-af0dcaf2b621 --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index a6aff1bbe6..aa12211489 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/github/github-mcp-server -go 1.25.0 +go 1.25.12 require ( github.com/go-chi/chi/v5 v5.3.1 From fc8eff27bf48213c45ef9e361d407e5ce117b5d9 Mon Sep 17 00:00:00 2001 From: Logan Rosen Date: Tue, 21 Jul 2026 19:01:53 -0400 Subject: [PATCH 2/2] build(ui): update fast-uri to 3.1.4 Resolve the high-severity host-confusion advisories reported by npm audit. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 0b2aa497-b47d-464a-b132-af0dcaf2b621 --- ui/package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ui/package-lock.json b/ui/package-lock.json index 0716e12068..71075e1711 100644 --- a/ui/package-lock.json +++ b/ui/package-lock.json @@ -2730,9 +2730,9 @@ "peer": true }, "node_modules/fast-uri": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz", - "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==", + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz", + "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==", "funding": [ { "type": "github",