# Negative fixture for CVE-2026-8355 (#1054): the release at the floor of the
# rule that carries it, past every fix the rule names.
mcp-contextforge-gateway==1.0.9
