v4.5.69

googleapis/mcp-toolboxv4.5.69Jul 28, 2026by github-actions[bot]

AI Summary

A maintenance release that addresses a security vulnerability by pinning the `sharp` library, updates dependencies for Next.js and PostCSS, and adds support for a new exchange, Nado. It also includes performance optimizations and specific bug fixes for order quantity rounding and ticker percentages on exchanges like Phemex and Weex.

Key Highlights

  • Security fix: pinned sharp to 0.35.0 to resolve libvips CVE
  • New exchange support: Nado
  • New playground example for Polymarket predictions
  • Fixes for spot order quantities (Phemex) and ticker percentages (Weex)

New Features

  • Nado exchange integration
  • Polymarket prediction example in playground

Full Release Notes

## What's Changed
* fix(website): resolve sharp/libvips GHSA-f88m-g3jw-g9cj by pinning sharp to 0.35.0 by @kroitor with @Copilot in https://github.com/ccxt/ccxt/pull/29287
* fix(playground): pin sharp to 0.35.0 for libvips CVE remediation by @kroitor with @Copilot in https://github.com/ccxt/ccxt/pull/29288
* fix: broken urls by @ttodua in https://github.com/ccxt/ccxt/pull/29291
* chore(deps): bump next from 16.2.6 to 16.2.11 in /website by @dependabot[bot] in https://github.com/ccxt/ccxt/pull/29293
* fix: rootDir paths by @ttodua in https://github.com/ccxt/ccxt/pull/29292
* chore(deps): bump next from 16.2.6 to 16.2.11 in /examples/ts/nextjs-page-router by @dependabot[bot] in https://github.com/ccxt/ccxt/pull/29295
* fix(phemex): round spot order quantities to market precision before Ev scaling by @g0rdonL in https://github.com/ccxt/ccxt/pull/29294
* fix(weex): scale ticker percentage by @Shiven0504 in https://github.com/ccxt/ccxt/pull/29299
* golang http.Transport is not reused for proxies, huge leak by @thebocher in https://github.com/ccxt/ccxt/pull/29300
* fix(lbank): parse swap ticker timestamp by @mavlevich in https://github.com/ccxt/ccxt/pull/29303
* fix(build): reclaim playground box disk before deploy, not only after success by @pcriadoperez in https://github.com/ccxt/ccxt/pull/29301
* chore(deps): bump postcss from 8.5.15 to 8.5.18 in /website by @dependabot[bot] in https://github.com/ccxt/ccxt/pull/29306
* Align Docker image `idna` pin with project metadata by @kroitor with @Copilot in https://github.com/ccxt/ccxt/pull/29307
* fix(build): restore arm64 development image by @mavlevich in https://github.com/ccxt/ccxt/pull/29305
* refactor(js): safestring optimization by @ttodua in https://github.com/ccxt/ccxt/pull/29296
* fix(future): nativeRejectionHandled by @carlosmiei in https://github.com/ccxt/ccxt/pull/29322
* feat(myriad): update fetchEvent(s) for ob events, add static tests by @Dan-krm in https://github.com/ccxt/ccxt/pull/29297
* feat(playground): add Polymarket prediction example by @pcriadoperez in https://github.com/ccxt/ccxt/pull/29224
* perf(js): safe function consistency by @ttodua in https://github.com/ccxt/ccxt/pull/29313
* fix(htx): cap fetchFundingRateHistory limit at 100 for linear swaps by @rayBastard in https://github.com/ccxt/ccxt/pull/29325
* feat(nado): new exchange by @sc0Vu in https://github.com/ccxt/ccxt/pull/28800

## New Contributors
* @g0rdonL made their first contribution in https://github.com/ccxt/ccxt/pull/29294
* @thebocher made their first contribution in https://github.com/ccxt/ccxt/pull/29300
* @mavlevich made their first contribution in https://github.com/ccxt/ccxt/pull/29303

**Full Changelog**: https://github.com/ccxt/ccxt/compare/v4.5.68...v4.5.69