chore: bump ext-apps to 1.7.4

[ochafik]

Changes since 1.7.3

No SDK API changes in this release.

Examples

• lazy-auth-server: require PKCE and bind redirect_uri in token exchange (Require PKCE and bind redirect_uri in lazy-auth-server token exchange #681)
• lazy-auth-server: support mounting under a base path of a host Express app (lazy-auth-server: support mounting under a base path #683)

Security

npm audit now reports 0 vulnerabilities (was: 1 critical, 3 high, 6 moderate):

• Removed unused vitest devDependency from basic-host (critical advisory; the package was never referenced by any test or config)
• systeminformation ^5.31.5 → ^5.31.6 in system-monitor-server (Linux command injection, GHSA-hvx9-hwr7-wjj9)
• Lockfile-only transitive bumps: devalue 5.8.1, fast-uri 3.1.2, hono 4.12.23, ip-address 10.2.0, express-rate-limit 8.5.2, postcss 8.5.15, qs 6.15.2, svelte 5.56.1

Verified in the playwright Docker image (linux): npm ci + unit tests 373/373 pass; e2e failures are identical to unmodified origin/main in the same container (arm64 golden-screenshot/timing artifacts), so no regressions from the bumps — GitHub CI is authoritative for e2e.

Release process

After merging, create a GitHub Release with tag v1.7.4 to trigger the npm publish workflow.

Note: the v1.7.3 publish run failed for @modelcontextprotocol/server-transcript (E404 on PUT on both attempts — npm masks missing per-package token access as 404, and the same token published the other 18 packages on attempt 2). If NPM_SECRET is a granular token, its package list likely omits server-transcript; worth fixing before approving the 1.7.4 deployment so transcript-server doesn't get skipped twice.

[pkg-pr-new]

Open in StackBlitz

@modelcontextprotocol/ext-apps

npm i https://pkg.pr.new/@modelcontextprotocol/ext-apps@685

@modelcontextprotocol/server-basic-preact

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-preact@685

@modelcontextprotocol/server-basic-react

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-react@685

@modelcontextprotocol/server-basic-solid

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-solid@685

@modelcontextprotocol/server-basic-svelte

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-svelte@685

@modelcontextprotocol/server-basic-vanillajs

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-vanillajs@685

@modelcontextprotocol/server-basic-vue

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-vue@685

@modelcontextprotocol/server-budget-allocator

npm i https://pkg.pr.new/@modelcontextprotocol/server-budget-allocator@685

@modelcontextprotocol/server-cohort-heatmap

npm i https://pkg.pr.new/@modelcontextprotocol/server-cohort-heatmap@685

@modelcontextprotocol/server-customer-segmentation

npm i https://pkg.pr.new/@modelcontextprotocol/server-customer-segmentation@685

@modelcontextprotocol/server-debug

npm i https://pkg.pr.new/@modelcontextprotocol/server-debug@685

@modelcontextprotocol/server-lazy-auth

npm i https://pkg.pr.new/@modelcontextprotocol/server-lazy-auth@685

@modelcontextprotocol/server-map

npm i https://pkg.pr.new/@modelcontextprotocol/server-map@685

@modelcontextprotocol/server-pdf

npm i https://pkg.pr.new/@modelcontextprotocol/server-pdf@685

@modelcontextprotocol/server-scenario-modeler

npm i https://pkg.pr.new/@modelcontextprotocol/server-scenario-modeler@685

@modelcontextprotocol/server-shadertoy

npm i https://pkg.pr.new/@modelcontextprotocol/server-shadertoy@685

@modelcontextprotocol/server-sheet-music

npm i https://pkg.pr.new/@modelcontextprotocol/server-sheet-music@685

@modelcontextprotocol/server-system-monitor

npm i https://pkg.pr.new/@modelcontextprotocol/server-system-monitor@685

@modelcontextprotocol/server-threejs

npm i https://pkg.pr.new/@modelcontextprotocol/server-threejs@685

@modelcontextprotocol/server-transcript

npm i https://pkg.pr.new/@modelcontextprotocol/server-transcript@685

@modelcontextprotocol/server-video-resource

npm i https://pkg.pr.new/@modelcontextprotocol/server-video-resource@685

@modelcontextprotocol/server-wiki-explorer

npm i https://pkg.pr.new/@modelcontextprotocol/server-wiki-explorer@685

commit: 1f1bc41