diff --git a/CHANGELOG.md b/CHANGELOG.md index 0daa50c..8d28d23 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [1.1.3] - 2026-09-14 + +### Fixed +- `CommandValidator` no longer blocks harmless redirects to `/dev/null`, `/dev/stdout`, `/dev/stderr`, `/dev/full` — the standard `2>/dev/null` stderr-discard idiom works again. Only redirects to real storage devices (sd/hd/vd/xvd/nvme/mmcblk/loop/mapper/sr/fd) are rejected (#19) +- Hardened `CommandValidator` to cover missed absolute-path `rm -rf` targets and sensitive-file exfiltration primitives (#17, #18) +- Synced stale `__version__` in `remoteshell_mcp/__init__.py` with `pyproject.toml` + ## [1.1.2] - 2026-08-19 ### Fixed diff --git a/pyproject.toml b/pyproject.toml index 06db77f..9411a27 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "remoteshell-mcp" -version = "1.1.2" +version = "1.1.3" description = "MCP server for managing SSH connections and executing remote commands" readme = "README.md" requires-python = ">=3.11" diff --git a/src/remoteshell_mcp/__init__.py b/src/remoteshell_mcp/__init__.py index c5c6995..cc61122 100644 --- a/src/remoteshell_mcp/__init__.py +++ b/src/remoteshell_mcp/__init__.py @@ -1,4 +1,4 @@ """Remote Shell MCP Server - SSH connection management and remote command execution.""" -__version__ = "1.0.0" +__version__ = "1.1.3" diff --git a/uv.lock b/uv.lock index 3f6c752..5ee53b7 100644 --- a/uv.lock +++ b/uv.lock @@ -1187,7 +1187,7 @@ wheels = [ [[package]] name = "remoteshell-mcp" -version = "1.1.2" +version = "1.1.3" source = { editable = "." } dependencies = [ { name = "fastmcp" },