awesome-copilot

mirror of https://github.com/github/awesome-copilot.git synced 2026-08-21 08:26:52 +00:00

Files

T

jeanpaulhassane-225 89e85e6060 dotnet-mcp-builder: pin sample dependency versions (#2699 )

The MCP Apps sample HTML bundle imported ext-apps from esm.sh using an
unpinned major-version tag (@1), which Snyk flags as an unverifiable
external dependency / third-party content exposure risk (indirect
prompt-injection surface, since the imported module can call
app.updateModelContext and app.callServerTool). Pin it to the current
release (1.7.5).

Also pin the sample `dotnet add package` commands for the
ModelContextProtocol* and Microsoft.Extensions.Hosting packages to
their current exact versions (2.2.0 / 10.0.11), and correct a stale
"2.0.0 is current" note in packages.md.

2026-08-21 02:19:47 +00:00

client.md

dotnet-mcp-builder: pin sample dependency versions (#2699 )

2026-08-21 02:19:47 +00:00

elicitation.md

Update dotnet-mcp-builder skill to ModelContextProtocol 2.x (#2487 )

2026-07-31 10:31:14 +10:00

mcp-apps.md

dotnet-mcp-builder: pin sample dependency versions (#2699 )

2026-08-21 02:19:47 +00:00

packages.md

dotnet-mcp-builder: pin sample dependency versions (#2699 )