Fix tar, SDK, and axios vulnerabilities via pnpm overrides#16

Merged

CalebGerman merged 7 commits intomainfrom

copilot/fix-pnpm-audit-issues

Feb 9, 2026

Commits on Feb 9, 2026

Initial plan
Copilot
committed
Add changeset documenting security audit verification

Copilot
and
CalebGerman
committed
Add pnpm override for @modelcontextprotocol/sdk to fix CVE-2026-0621 and CVE-2026-25536

Copilot
and
CalebGerman
committed
Initial investigation: npm audit reveals tar vulnerabilities

Copilot
and
CalebGerman
committed
Add npm overrides to fix tar vulnerabilities - npm audit now passes

Copilot
and
CalebGerman
committed
Remove package-lock.json and npm overrides - pnpm-only repo

Copilot
and
CalebGerman
committed
Add axios override to fix GHSA-43fc-jf86-j433 DoS vulnerability

Copilot
and
CalebGerman
committed