Files
awesome-copilot/skills
jeanpaulhassane-225 89e85e6060 dotnet-mcp-builder: pin sample dependency versions (#2699)
The MCP Apps sample HTML bundle imported ext-apps from esm.sh using an
unpinned major-version tag (@1), which Snyk flags as an unverifiable
external dependency / third-party content exposure risk (indirect
prompt-injection surface, since the imported module can call
app.updateModelContext and app.callServerTool). Pin it to the current
release (1.7.5).

Also pin the sample `dotnet add package` commands for the
ModelContextProtocol* and Microsoft.Extensions.Hosting packages to
their current exact versions (2.2.0 / 10.0.11), and correct a stale
"2.0.0 is current" note in packages.md.
2026-08-21 02:19:47 +00:00
..
2026-03-05 21:53:41 +11:00
2026-04-28 11:29:28 +10:00
2026-06-18 11:28:03 +10:00
2026-04-20 12:31:29 +10:00
2026-02-16 22:43:41 +01:00
2026-08-05 15:43:58 +10:00
2026-06-16 11:18:02 +10:00
2026-06-15 10:55:29 +10:00
2026-01-06 21:35:41 +01:00
2026-03-16 10:27:54 +11:00
2026-06-16 11:50:25 +10:00
2026-05-15 11:06:16 +10:00
2026-07-17 10:37:35 -07:00
2026-03-13 13:45:17 +11:00
2026-07-23 10:50:25 -07:00