Skip to content

fix: set dependency minimums to the CVE fix releases, release 2026.10.26 #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jtroup merged 1 commit into from
Oct 26, 2026
Merged

fix: set dependency minimums to the CVE fix releases, release 2026.10.26 #73

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
47 changes: 31 additions & 16 deletions NEWS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,20 @@

---

## October 26, 2026

### Features

### Changes

### Fixes

- **Installs alongside Cloud Custodian again**: you can install stacklet-mcp in the same
environment as Cloud Custodian again. If installing the October 23 release failed for
you, upgrade to this release.

---

## October 23, 2026

### Features
Expand All @@ -16,37 +30,38 @@
Stacklet's IaC Governance from the Stacklet documentation. When the documentation does
not cover something, it says so instead of guessing.
- **See which tools can change things**: AI apps that support it can now show which
Stacklet tools only read your data and which can make changes, so you can choose to
Stacklet tools only read your data and which can make changes. You can then choose to
approve changes before they happen. AssetDB queries count as able to make changes,
because what a query can do depends on your database permissions, so your app may ask
before it runs one.
because your database permissions decide what a query can do. Your app may ask before
it runs one.

### Changes

- **Private dataset exports**: only the person who starts a dataset export can download
it, and they must be signed in to Stacklet. Your assistant still downloads finished
it. They must be signed in to Stacklet. Your assistant still downloads finished
exports for you, using your Stacklet sign-in. If an export has expired, or belongs to
someone else, you now get a clear message instead of a broken link.
- **Simpler saved query results**: when your assistant saves the full results of an
AssetDB query to a file, the file now holds just the rows, which is easier to open in
other tools. If you have scripts that read these files, check them against the new
AssetDB query to a file, the file now holds just the rows. That makes it easier to open
in other tools. If you have scripts that read these files, check them against the new
format. Links to download query results now work only for people signed in to Stacklet.
- **Fewer startup errors on Windows**: the configuration that `stacklet-mcp agent-config`
generates now avoids text encoding errors when your AI app starts the server.
generates now avoids text encoding errors when your AI app starts the server. If you
created your configuration with an earlier release, run
`stacklet-mcp agent-config generate default` (or `unrestricted`) again, and replace your
app's Stacklet configuration with the output.

### Fixes

- **AssetDB queries work on more Stacklet deployments**: some deployments could not run
AssetDB queries at all. The server now finds AssetDB on its own.
- **Fewer failed GraphQL queries**: when your assistant writes a query that asks for data
Stacklet does not have, it now gets a clear explanation and can correct the query
itself.
- **Fresh installs start again**: installing stacklet-mcp into a new environment could
pull in a newer, incompatible version of a library it depends on, and the server would
not start. Installs now get a compatible version.
- **Security updates**: stacklet-mcp now requires a version of certifi, its list of
trusted certificate authorities, that no longer trusts the compromised eMudhra
authority. Other dependencies are updated to pick up security fixes.
- **Fewer failed GraphQL queries**: when your assistant asks for a kind of data Stacklet
does not have, it now gets a clear explanation. It can then correct the query itself.
- **Fresh installs start again**: a new install of stacklet-mcp could pick up an
incompatible library version, and the server would not start. Installs now get a
compatible version.
- **Security updates**: stacklet-mcp no longer trusts the compromised eMudhra certificate
authority. We also updated other libraries to pick up their security fixes.

---

Expand Down
9 changes: 4 additions & 5 deletions pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,15 +18,14 @@ classifiers = [
dynamic = [ "version" ]
dependencies = [
"certifi>=2026.10.19", # httpx's CA bundle; earlier releases trust the compromised eMudhra CA
"cryptography>=50.0.2", # not imported directly; minimum for CVE fixes
"fastmcp>=3.3.1,<4", # minimum for security fixes; fastmcp 4 removes APIs we import
"cryptography>=50", # not imported directly; CVE-2026-69247 fixed in 50.0.0
"fastmcp>=3.2,<4", # 3.2.0 fixes the advisories that affect us; fastmcp 4 removes APIs we import
"graphql-core>=3.2",
"httpx>=0.28.1",
"platformdirs>=4.13", # not imported directly; minimum for CVE fixes

@cubic-dev-ai cubic-dev-ai Bot Oct 26, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: Custom agent: Flag Security Vulnerabilities

This removes the floor despite a path-traversal advisory affecting platformdirs 1.4.4–4.11.10, fixed in 4.11.11; fastmcp-slim also depends on platformdirs. Keep a fixed-version floor such as >=4.11.11 so dependency resolution cannot select a vulnerable release.

Prompt for AI agents 
Check if this issue is valid — if so, understand the root cause and fix it. When an issue isn't valid or won't be fixed in this PR, reply in its thread with the reason and then resolve the thread. At pyproject.toml, line 25:

<comment>This removes the floor despite a path-traversal advisory affecting platformdirs 1.4.4–4.11.10, fixed in 4.11.11; `fastmcp-slim` also depends on platformdirs. Keep a fixed-version floor such as `>=4.11.11` so dependency resolution cannot select a vulnerable release.</comment>

<file context>
@@ -18,15 +18,14 @@ classifiers = [
   "graphql-core>=3.2",
   "httpx>=0.28.1",
-  "platformdirs>=4.13",            # not imported directly; minimum for CVE fixes
   "pydantic>=2.11.7",
   "pydantic-settings>=2.13,<2.14",
-  "pyjwt>=2.15.1",                 # not imported directly; minimum for CVE fixes
</file context>

@jtroup jtroup Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No thank you. There's no actual CVE attached to this; it comes from https://intel.aikido.dev/cve/AIKIDO-2026-777134. Raising the floor has a non-zero cost (the whole reason this PR exists) and there has to be a concrete justifiable reason to add one. That doesn't exist here.

"pydantic>=2.11.7",
"pydantic-settings>=2.13,<2.14",
"pyjwt>=2.15.1", # not imported directly; minimum for CVE fixes
"starlette>=1.8", # not imported directly; minimum for CVE fixes
"pyjwt>=2.15", # not imported directly; CVE-2026-101918 and CVE-2026-102275 fixed in 2.15.0
"starlette>=1.3.1", # not imported directly; CVE-2026-54283 fixed in 1.3.1
]
scripts.stacklet-mcp = "stacklet.mcp.mcp:main"

Expand Down
2 changes: 1 addition & 1 deletion stacklet/mcp/__init__.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@

"""Stacklet MCP server."""

__version__ = "2026.10.23"
__version__ = "2026.10.26"


USER_AGENT = f"stacklet.mcp/{__version__}"
10 changes: 4 additions & 6 deletions uv.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading