3.3.6

[call518]

What's Changed

• Security: Addressed CVE-2026-3219 — removed pip (<=26.0.1) from dev dependencies
  • pip has an interpretation conflict when handling concatenated tar/ZIP files (CVSS 4.6, CWE-434)
  • Since uv is the primary package manager, the pip dependency was removed entirely

Install

pip install mcp-postgresql-ops==3.3.6

Notes

• PyPI package: 3.3.6
• Security patch release (no functional changes)

---

This discussion was created from the release 3.3.6.