Security fix for GHSA-9897-5v79-gfvc: startup no longer automatically loads project dotenv files or working-directory YAML. Custom YAML requires an explicit absolute CONFIG_PATH. Docker env_file and explicitly configured launcher environments remain supported.
If you previously relied on automatic dotenv loading, select a trusted env file in your launcher or configure the MCP client's env block.
Reported privately by @tmowbrey. See the security advisory for affected versions and migration guidance.
Run launcher commands from an operator-controlled directory; the launcher and any configuration it loads must also be trusted.
Install or upgrade:
pip install unifi-mcp-shared==0.6.17
What's Changed
Shared Library
Omitted 4 unrelated monorepo commits from these notes.
Full Changelog: shared/v0.6.16...shared/v0.6.17