fix: update MCP SDK to 1.24.0 for security fixes (#33)

- Update @modelcontextprotocol/sdk from 1.20.2 to 1.24.0
- Replace deprecated 'description' property with 'title' in Server constructor
- Resolves CVE-2025-66414 (HIGH severity DNS rebinding vulnerability)
- Bump version to 0.6.4

Author: alexpota

CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.6.4] - 2025-12-05
+
+### Security
+
+- Updated @modelcontextprotocol/sdk from 1.20.2 to 1.24.0 to resolve CVE-2025-66414 (HIGH severity DNS rebinding vulnerability)
+- Updated express from 5.1.0 to 5.2.1 to resolve CVE-2025-13466 (MODERATE severity DoS vulnerability)
+- Updated body-parser from 2.2.0 to 2.2.1 to resolve CVE-2025-13466 (MODERATE severity DoS vulnerability)
+
+### Changed
+
+- Replaced `description` with `title` property in MCP Server constructor for SDK 1.24.0 compatibility
+
 ## [0.6.2] - 2025-11-21
 
 ### Fixed

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-mcp",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "Universal deployment tracker for AI assistants",
   "keywords": [
     "mcp",
@@ -60,7 +60,7 @@
     "release:major": "npm version major && git push origin main --tags"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.11.2",
+    "@modelcontextprotocol/sdk": "^1.24.0",
     "zod": "^4.0.14"
   },
   "devDependencies": {

package.json

@@ -26,7 +26,7 @@ const server = new Server(
   {
     name: "deploy-mcp",
     version: "0.1.0",
-    description: "Universal deployment tracker for AI assistants",
+    title: "Deploy MCP - Universal Deployment Tracker",
   },
   {
     capabilities: {