Dependency security fixes
Full release on GitHub ↗What shipped
zod is updated for an advisory about memory exhaustion on large arrays without a length limit. Both servers validate tool input with it, and the stdio server has inputs with no maximum length. ip-address and the test tooling are also updated; neither server was exposed through them.
Why it matters
Upgrading closes the one advisory that could reach the stdio server through ordinary tool input.