fix(deps): pin dotenv to 16.6.1 to suppress console message

- Pins the `dotenv` package to `16.6.1` to prevent the promotional message from being printed to the console during startup, which could interfere with STDIO-based MCP clients.
- Adds `dotenv` to the `.ncurc.json` reject list to prevent future automatic upgrades to problematic versions.
- Updates the CHANGELOG to document this fix.

Author: cyanheads

.ncurc.json

@@ -1,3 +1,3 @@
 {
-  "reject": ["chrono-node"]
+  "reject": ["chrono-node", "dotenv"]
 }

CHANGELOG.md

@@ -2,16 +2,24 @@
 
 All notable changes to this project will be documented in this file.
 
+## v2.1.8 - 2025-06-29
+
+### Fixed
+
+- Downgraded `dotenv` to `^16.6.1` to suppress `dotenvx` promotional logging messages in v17.0 that were interfering with the stdio transport.
+- Added `dotenv` to the `reject` list in `.ncurc.json` to prevent future automatic upgrades to problematic versions.
+
 ## v2.1.7 - 2025-06-29
 
 ### Changed
+
 - Suppressed `dotenv` debug output to prevent interference with the stdio transport.
 - Updated the fallback package name in the configuration for better error identification.
 
-
 ## v2.1.6 - 2025-06-29
 
 ### Dependencies
+
 - Updated the following dependencies:
   - `@modelcontextprotocol/sdk` to `^1.13.2`
   - `@types/node` to `^24.0.7`
@@ -24,6 +32,7 @@ All notable changes to this project will be documented in this file.
   - `typedoc` to `^0.28.6`
 
 ### Changed
+
 - Minor formatting changes across several files.
 
 ## v2.1.5 - 2025-06-29

README.md

@@ -2,7 +2,7 @@
 
 [![TypeScript](https://img.shields.io/badge/TypeScript-^5.8.3-blue.svg)](https://www.typescriptlang.org/)
 [![Model Context Protocol](https://img.shields.io/badge/MCP%20SDK-^1.13.2-green.svg)](https://modelcontextprotocol.io/)
-[![Version](https://img.shields.io/badge/Version-2.1.6-blue.svg)](./CHANGELOG.md)
+[![Version](https://img.shields.io/badge/Version-2.1.8-blue.svg)](./CHANGELOG.md)
 [![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 [![Status](https://img.shields.io/badge/Status-Stable-green.svg)](https://github.com/cyanheads/git-mcp-server/issues)
 [![GitHub](https://img.shields.io/github/stars/cyanheads/git-mcp-server?style=social)](https://github.com/cyanheads/git-mcp-server)

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyanheads/git-mcp-server",
-  "version": "2.1.7",
+  "version": "2.1.8",
   "description": "An MCP (Model Context Protocol) server enabling LLMs and AI agents to interact with Git repositories. Provides tools for comprehensive Git operations including clone, commit, branch, diff, log, status, push, pull, merge, rebase, worktree, tag management, and more, via the MCP standard. STDIO & HTTP.",
   "main": "dist/index.js",
   "files": [
@@ -22,9 +22,9 @@
   "homepage": "https://github.com/cyanheads/git-mcp-server#readme",
   "scripts": {
     "build": "tsc && node --loader ts-node/esm scripts/make-executable.ts dist/index.js",
-    "start": "node dist/index.js",
-    "start:stdio": "MCP_LOG_LEVEL=debug MCP_TRANSPORT_TYPE=stdio node dist/index.js",
-    "start:http": "MCP_LOG_LEVEL=debug MCP_TRANSPORT_TYPE=http node dist/index.js",
+    "start": "DOTENV_CONFIG_SILENT=true node dist/index.js",
+    "start:stdio": "DOTENV_CONFIG_SILENT=true MCP_LOG_LEVEL=debug MCP_TRANSPORT_TYPE=stdio node dist/index.js",
+    "start:http": "DOTENV_CONFIG_SILENT=true MCP_LOG_LEVEL=debug MCP_TRANSPORT_TYPE=http node dist/index.js",
     "rebuild": "ts-node --esm scripts/clean.ts && npm run build",
     "docs:generate": "typedoc --tsconfig ./tsconfig.typedoc.json",
     "tree": "ts-node --esm scripts/tree.ts",
@@ -41,7 +41,7 @@
     "@types/sanitize-html": "^2.16.0",
     "@types/validator": "^13.15.2",
     "chrono-node": "2.8.0",
-    "dotenv": "^17.0.0",
+    "dotenv": "16.6.1",
     "hono": "^4.8.3",
     "jose": "^6.0.11",
     "openai": "^5.8.2",