Fixed
- Expanded
SearXNGWebresponse interface to include all fields returned by the API. - Search requests now use
AbortControllerto enforce the configured timeout and prevent hanging.
Security
- Pinned all GitHub Actions workflow steps to full commit SHAs to guard against tag-swap supply-chain attacks.
- Added CodeQL static analysis, Trivy Docker image scanning, and ClusterFuzzLite continuous fuzzing.
- Added Dependabot for automated npm and GitHub Actions dependency updates.
- Verified
mcp-publisherbinary integrity with SHA-256 checksum before use.
Full Changelog: v1.3.1...v1.3.2