ritms42andClaude Opus 5.5 62bf2b2910 fix(mcp): pin chrome-devtools-mcp to 1.10.1 instead of @latest ...

The default chrome-devtools connector is launched with `npx -y` and
`@latest`, so every session start can silently install whatever version
was most recently published to npm. Pinning makes the default connector
reproducible and removes the unpinned-npx finding that /security-scan
(AgentShield) reports against ECC's own .mcp.json.

The same spec is pinned in the Codex merge script so both harnesses
stay in sync, and the Codex merge test is updated to match.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-24 21:48:57 +02:00

..

check-codex-global-state.sh

fix: stability batch — hook stdin truncation, Codex exa TOML, Stop hook JSON, GateGuard repetition (#2227)

2026-06-11 00:31:33 -04:00

check-plugin-cache.js

fix: add plugin cache health check (#2249)

2026-06-15 14:01:25 -04:00

install-global-git-hooks.sh

fix(security): stderr skip, independent audit, home MCP trust, dry-run conflict check

2026-09-15 00:29:23 +05:30

legacy-sync-state.js

fix(install): close reviewed reliability gaps

2026-08-13 18:03:37 -04:00

merge-codex-config.js

feat: sync the codex baseline and agent roles

2026-04-01 16:08:03 -07:00

merge-mcp-config.js

fix(mcp): pin chrome-devtools-mcp to 1.10.1 instead of @latest

2026-09-24 21:48:57 +02:00