Skip to content

v0.2.17

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Apr 14:39
· 140 commits to main since this release
v0.2.17
46495a3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🌟 Release Highlights

This release brings container image flexibility, improved configuration validation, and several reliability fixes — making MCP Gateway more robust for production deployments.

✨ What's New

  • SHA-256 digest support in container image references (#3352) — Container images can now be pinned by digest (e.g., image@sha256:…), enabling immutable, verifiable deployments. This is especially valuable in security-sensitive environments where image tags alone are insufficient.

  • Fail-fast OIDC environment variable validation (#3367) — Invalid or missing OIDC configuration is now detected at startup rather than at runtime, surfacing misconfigurations immediately and preventing hard-to-diagnose failures later. See the Configuration Guide for details.

  • OTLP headers now accept string format per spec v1.13.0 (#3338) — OpenTelemetry header configuration is now fully compliant with OTLP spec v1.13.0, improving interoperability with observability backends.

🐛 Bug Fixes & Improvements

  • GraphQL authorAssociation injection fix (#3413) — Resolved incorrect field injection into User-type nodes in GraphQL responses, preventing malformed responses. Also adds proper 503 logging when policy is missing.

  • Rust guard case-insensitive comparison fix (#3325) — Replaced to_lowercase() with eq_ignore_ascii_case() in the Rust guard for more correct and efficient string comparisons.

  • Proxy handler lint fixes (#3415) — Non-constant format strings in the proxy handler have been corrected, improving code correctness and eliminating potential formatting issues.

🐳 Docker Image

The Docker image for this release is available at:

docker pull ghcr.io/github/gh-aw-mcpg:v0.2.17
# or
docker pull ghcr.io/github/gh-aw-mcpg:latest

Supported platforms: linux/amd64, linux/arm64

For complete details, see the full release notes.

Generated by Release · ● 107.4K

What's Changed

  • Update OTLP headers to accept string format (spec v1.13.0) by @Copilot in #3338
  • [Repo Assist] fix(rust-guard): replace to_lowercase() with eq_ignore_ascii_case, remove stale dead_code by @github-actions[bot] in #3325
  • [test] Add tests for server.peekRequestBody and config.isTransientHTTPError by @github-actions[bot] in #3317
  • [log] Add debug logging to GraphQL owner/repo and search query extraction by @github-actions[bot] in #3308
  • [test-improver] Improve tests for mcp/connection package by @github-actions[bot] in #3316
  • Allow SHA-256 digests in container image references by @Copilot in #3352
  • Fail-fast OIDC env var validation at config load time by @Copilot in #3367
  • 🔄 Update schema URL to v0.67.2 by @github-actions[bot] in #3384
  • Fix non-constant format string lint errors in proxy handler by @Copilot in #3415
  • Fix GraphQL authorAssociation injection into User-type nodes; log 503 on missing policy by @Copilot in #3413

Full Changelog: v0.2.16...v0.2.17

Assets 8
Loading