Fixed
- Desktop extension finds uvx installed via
pip install --useron Windows (#267) — the.mcpblauncher could fail to start withError: Could not find 'uvx'even when uv was installed, becausepip install --user uvplacesuvx.exein%APPDATA%\Python\Python3XX\Scripts, which Windows does not add to PATH and which was missing from the launcher's search list. The launcher now checks the per-user Scripts directory of every installed CPython version. No behavior change on macOS/Linux. Thanks to @onexoluxion for the fix!
Security
- Bumped locked dependencies with published CVEs (#268) —
uv.locknow pins mcp 1.28.1, starlette 1.3.1, python-multipart 0.0.32, cryptography 49.0.0, and pyjwt 2.13.0. Lockfile-only change: no source or constraint changes, and end users installing viauv tool installwere already resolving patched versions from PyPI — this brings the committed lockfile (used by CI and contributors) up to date. Thanks to @onexoluxion for the precise report and verified fix command!