utcp-http 1.1.3

h3xxit · h3xxit · commit 3a50250441cf · 2026-05-10T13:03:55.000+02:00
Ships the OpenAPI converter defense-in-depth from e356ea7: a remote spec can no longer declare a loopback ``servers[0].url`` to redirect tool invocation at the agent's loopback interface. The runtime check already shipped in 1.1.2; this just refuses the malicious tools at conversion time so they never enter the registry.
diff --git a/plugins/communication_protocols/http/pyproject.toml b/plugins/communication_protocols/http/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "utcp-http"
-version = "1.1.2"
+version = "1.1.3"
 authors = [
   { name = "UTCP Contributors" },
 ]

Original file line number	Diff line number	Diff line change
`@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"`
`4`	`4`
`5`	`5`	`[project]`
`6`	`6`	`name = "utcp-http"`
`7`		`-version = "1.1.2"`
	`7`	`+version = "1.1.3"`
`8`	`8`	`authors = [`
`9`	`9`	`{ name = "UTCP Contributors" },`
`10`	`10`	`]`