[jaclynjessup]

Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

• modules/mcp/package.json

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

⚠️ Warning

Failed to update the yarn.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-MODELCONTEXTPROTOCOLSDK-21756800	721

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[jaclynjessup]

This minor version upgrade includes bug fixes that introduce stricter validation and change existing behavior, requiring verification.

Key Changes:

• HTTP Request Size Limits: A fix was introduced to limit the size of HTTP request bodies and to bound the length of JSON-RPC batches. Applications sending very large requests may now encounter errors that were not present before.
• Authentication URI Handling: A fix was implemented to preserve resource URIs without a trailing slash during authentication. This could affect authentication flows that were unintentionally relying on the previous behavior.

Recommendation: Verify that your application's HTTP requests do not exceed the new, stricter limits and confirm that authentication logic is not impacted by the change in URI handling.

Source: Release notes

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Workday/canvas-kit
• Branch: snyk-fix-6410be7bf0bf8b1df2de481367f0c31a
• File: .coderabbit.yaml
• Commit: e0c0667
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: a22b0f66-464b-4526-9b63-0580c73a5bf1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cypress]

Workday/canvas-kit    Run #11789

Run Properties:   Passed #11789  •  85b020d70f ℹ️: Merge e0c06673cd656cbb29f261c9aa70b5944f3d928c into 21b0c64e5227e1a6aa3208ad5249...

Project	Workday/canvas-kit
Branch Review	snyk-fix-6410be7bf0bf8b1df2de481367f0c31a
Run status	Passed #11789
Run duration	02m 52s
Commit	85b020d70f ℹ️: Merge e0c06673cd656cbb29f261c9aa70b5944f3d928c into 21b0c64e5227e1a6aa3208ad5249...
Committer	Jaclyn
View all properties for this run ↗︎

---

Test results
Failures	0
Flaky	0
Pending	17
Skipped	0
Passing	917
View all changes introduced in this branch ↗︎

UI Coverage  14.32%
Untested elements	2564
Tested elements	426

Accessibility  99.22%
Failed rules	4 critical   5 serious   3 moderate   2 minor
Failed elements	75