Update @mozilla-ai/mcpd to 0.0.3 for security fixes

[peteski22]

Summary

Updates the @mozilla-ai/mcpd SDK from v0.0.2 to v0.0.3 to incorporate security fixes.

Security Fixes

• CVE-2025-64718 (js-yaml): Prototype pollution vulnerability (CVSS 5.3)
• CVE-2025-64756 (glob): Command injection vulnerability (High severity)

Changes

• Updated @mozilla-ai/mcpd from ^0.0.2 to ^0.0.3

Summary by CodeRabbit

• Chores
  • Updated dependency versions to latest compatible releases.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

Dependency version update in package.json where "@mozilla-ai/mcpd" is upgraded from version "^0.0.2" to "^0.0.3". No structural or functional changes to the codebase.

Changes

Cohort / File(s)	Change Summary
Dependency version bump package.json	"@mozilla-ai/mcpd" updated from "^0.0.2" to "^0.0.3"

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch update-mcpd-sdk-v0.0.3

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: ASSERTIVE

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 0ccc82f and 6149a32.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• package.json (1 hunks)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}