Commit graph

  • d1dcaf3fb3
    fix(publisher): tolerate transient device-flow failures during login polling (#1588) main Yusufhan Sacak 2026-09-16 16:42:30 +01:00
  • 73aebc1526
    fix(publisher): treat GitHub device-flow slow_down as retriable (#1290) Ishan Gupta 2026-09-16 20:44:51 +05:30
  • cabf0607b6
    build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /deploy (#1630) dependabot[bot] 2026-09-16 18:02:08 +03:00
  • c7411aeaba
    build(deps): bump the go-dependencies group with 2 updates (#1634) dependabot[bot] 2026-09-16 18:01:34 +03:00
  • 739b70e8bc
    fix: fail safely in registry admin scripts (#1622) Radoslav Dimitrov 2026-09-06 01:13:09 +03:00
  • dd4b2939e3
    test: isolates temp test fixtures (#1569) Jeff Wainwright 2026-09-05 14:31:12 -07:00
  • 068a97a2f8
    fix: identify submitted server version in publish diagnostics (#1621) Radoslav Dimitrov 2026-09-06 00:18:27 +03:00
  • d3fbdc61ce
    ci: detect more invalid server publish paths (#1620) Radoslav Dimitrov 2026-09-05 22:48:16 +03:00
  • 5271ba5075
    docs: add PulseFeed MCP Drift Watch to community projects (#1581) Nikolife2016 2026-09-06 02:47:31 +07:00
  • 974a523857
    docs: carry two modelcontextprotocol.io fixes back upstream (#1590) Koichi ITO 2026-09-06 04:45:05 +09:00
  • 1d1eb91e51
    build(deps): bump github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0 in the go-dependencies group (#1619) dependabot[bot] 2026-09-05 22:44:08 +03:00
  • 99c9439d6f
    chore: group Dependabot updates (#1618) Radoslav Dimitrov 2026-09-05 22:33:43 +03:00
  • 30ca36e42e
    build(deps): bump github.com/google/go-containerregistry from 0.21.9 to 0.22.0 (#1576) dependabot[bot] 2026-09-05 21:46:07 +03:00
  • f98e367dd9
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.259.0 to 3.261.0 in /deploy (#1606) dependabot[bot] 2026-09-05 21:40:40 +03:00
  • e166f76f06
    build(deps): bump the opentelemetry group across 1 directory with 6 updates (#1607) dependabot[bot] 2026-09-05 21:39:42 +03:00
  • d08e70b32a
    build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.14.1 (#1608) dependabot[bot] 2026-09-05 21:14:11 +03:00
  • 00d5aaad79
    build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.33.0 to 4.34.0 in /deploy (#1609) dependabot[bot] 2026-09-05 21:13:09 +03:00
  • 57b19e27d2
    build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 (#1616) dependabot[bot] 2026-09-05 21:03:44 +03:00
  • da98ceced3
    build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /deploy (#1617) dependabot[bot] 2026-09-05 20:52:50 +03:00
  • 71f3a1b62e
    build(deps): bump anchore/sbom-action from 0.24.0 to 0.24.2 in the actions group (#1610) dependabot[bot] 2026-09-05 20:30:25 +03:00
  • 6036804f1c
    build(deps): bump the opentelemetry group across 1 directory with 6 updates (#1530) dependabot[bot] 2026-08-21 01:48:19 +03:00
  • 3c1ee7d272
    build(deps): bump github.com/google/go-containerregistry from 0.21.8 to 0.21.9 (#1531) dependabot[bot] 2026-08-21 01:48:09 +03:00
  • 5022e04399
    ci: widen the publish-attempt path list (#1560) Radoslav Dimitrov 2026-08-21 01:43:05 +03:00
  • 8759d9d8c0
    ci: bump golangci-lint to v2.13.1 to fix panic on Go 1.27 (#1561) Radoslav Dimitrov 2026-08-21 00:14:13 +03:00
  • 4ec2ed3f9f
    build(deps): bump golang.org/x/mod from 0.38.0 to 0.40.0 (#1552) dependabot[bot] 2026-08-20 22:47:32 +03:00
  • 17dec17a41
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.255.0 to 3.257.0 in /deploy (#1553) dependabot[bot] 2026-08-20 22:47:18 +03:00
  • 91cc4aed20
    build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#1554) dependabot[bot] 2026-08-20 22:47:02 +03:00
  • a25f166b4b
    docs: remove stale complete.md and fix remaining stale references (#1522) Radoslav Dimitrov 2026-08-10 16:32:37 +03:00
  • 3e463e52bb
    docs: correct contributor prerequisites and stale dev-env references (#1520) Radoslav Dimitrov 2026-08-10 16:32:25 +03:00
  • 988b078e02
    docs(deploy): correct config parameter names in deploy README (#1521) Radoslav Dimitrov 2026-08-10 16:25:56 +03:00
  • 43402d8f6f
    fix(publisher): document --algorithm for ECDSA login and fix validate --help (#1519) Radoslav Dimitrov 2026-08-10 16:25:00 +03:00
  • 43fbc1dcbd
    fix(admin): use PATCH status endpoints in takedown script and runbook (#1518) Radoslav Dimitrov 2026-08-10 16:24:06 +03:00
  • 69374b08de
    docs: add cargo and crates.io to schema examples (#1511) Wolfe-James 2026-08-10 08:19:06 -04:00
  • 03aeca562f
    build(deps): bump github.com/go-git/go-git/v6 from 6.0.0-alpha.4 to 6.0.0-alpha.5 in /deploy (#1514) dependabot[bot] 2026-08-10 15:18:42 +03:00
  • 4508c48f80
    Fix broken relative links in releasing docs (#1517) Recoordinate 2026-08-11 00:18:22 +12:00
  • f36b7dd4af
    chore(deploy): promote production to 1.8.1 (#1510) Radoslav Dimitrov 2026-08-07 02:43:14 +03:00
  • f52dc8525a
    fix(deploy): cache bulk registry reads (#1509) v1.8.1 Radoslav Dimitrov 2026-08-07 02:16:52 +03:00
  • 2b09bde534
    docs: remove stale build.sh reference from publisher Key Files (#1504) Recoordinate 2026-08-07 10:39:30 +12:00
  • 5c19656cb9
    fix(auth): reject github.io domains in DNS/HTTP token exchange (org namespace takeover) (#1506) Sash 2026-08-07 05:38:34 +07:00
  • 0f78916eee
    build(deps): bump docker/login-action from 4.4.0 to 4.6.0 in the actions group (#1492) dependabot[bot] 2026-08-07 01:30:37 +03:00
  • 34f0bb99f3
    build(deps): bump cloud.google.com/go/kms from 1.32.0 to 1.33.0 (#1491) dependabot[bot] 2026-08-07 01:30:21 +03:00
  • ac340e0b88
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.253.0 to 3.255.0 in /deploy (#1490) dependabot[bot] 2026-08-07 01:30:05 +03:00
  • 4e1f96a716
    build(deps): bump github.com/danielgtaylor/huma/v2 from 2.39.0 to 2.39.1 (#1489) dependabot[bot] 2026-08-07 01:29:42 +03:00
  • 2a28830156
    docs: remove Tadas as WG Lead (#1493) Tadas Antanavicius 2026-08-07 04:29:25 +06:00
  • 4000b09953
    build(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8 (#1507) dependabot[bot] 2026-08-07 01:28:11 +03:00
  • 0b5cc0f6a9
    build(deps): consolidate open dependabot updates (#1482) Radoslav Dimitrov 2026-07-27 13:13:53 +03:00
  • b25ab9b93a
    build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 in /deploy (#1480) dependabot[bot] 2026-07-27 06:03:48 -04:00
  • 8d3517519f
    fix(deps): bump golang.org/x/text to v0.39.0 (GO-2026-5970) (#1481) Radoslav Dimitrov 2026-07-27 13:03:12 +03:00
  • 5cbf3320e8
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.251.0 to 3.253.0 in /deploy (#1448) dependabot[bot] 2026-07-27 05:54:07 -04:00
  • 2271214bd8
    build(deps): bump cloud.google.com/go/kms from 1.31.0 to 1.32.0 (#1447) dependabot[bot] 2026-07-27 05:53:48 -04:00
  • 29e32c39dc
    deploy: update prod to v1.8.0 (#1443) Radoslav Dimitrov 2026-07-13 12:03:10 +03:00
  • d813d2b805
    fix(validators): distinguish a missing package from a missing version on PyPI/NPM (#1411) v1.8.0 Thomas Thomsen 2026-07-13 04:24:34 +09:00
  • 5d736c7c6c
    test(api): remove placeholder CORS test superseded by #1436 (#1441) Radoslav Dimitrov 2026-07-12 22:18:39 +03:00
  • 3a39b665ac
    fix(api): allow PATCH in CORS so browsers can call the status endpoints (#1436) Yusufhan Saçak 2026-07-12 21:53:13 +03:00
  • c36b521bf1
    fix: reject mangled publisher metadata (#1310) Yufeng He 2026-07-13 00:57:45 +08:00
  • 2d3262c8aa
    fix(ci): re-validate author association via REST in close-invalid-publish-prs (#1440) Radoslav Dimitrov 2026-07-12 19:11:04 +03:00
  • 3fe10fc4c6
    docs: add polygraph to community projects (#1421) Rúben Sousa Dinis 2026-07-10 23:55:54 +01:00
  • 9e762b03c7
    docs(auth): document fine-grained PAT permission for org publishing (+ pagination-cap test) (#1435) Radoslav Dimitrov 2026-07-11 01:48:56 +03:00
  • 5da9b4c8bf
    build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#1433) dependabot[bot] 2026-07-10 17:06:10 -04:00
  • 2bc37b1999
    fix(auth): grant org namespace only to org Owners, not all members (#1383) Tadas Antanavicius 2026-07-10 14:05:47 -07:00
  • 224e23dc2c
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.248.0 to 3.251.0 in /deploy (#1431) dependabot[bot] 2026-07-09 15:53:31 -04:00
  • 7f647ef44f
    build(deps): bump the actions group across 1 directory with 4 updates (#1430) dependabot[bot] 2026-07-09 15:53:11 -04:00
  • 5cc44d091c
    build(deps): bump github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0 (#1429) dependabot[bot] 2026-07-09 15:52:55 -04:00
  • f3162dbc1e
    build(deps): bump golang.org/x/mod from 0.37.0 to 0.38.0 (#1428) dependabot[bot] 2026-07-09 15:52:31 -04:00
  • 65aab79997
    ci: auto-close PRs that try to publish servers via the repo (#1393) Radoslav Dimitrov 2026-07-09 22:43:23 +03:00
  • 535941a30e
    build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.31.1 to 4.32.0 in /deploy (#1353) dependabot[bot] 2026-06-25 06:46:17 -04:00
  • 44397cbe1d
    Fix broken reference documentation links (#1387) Burak Bayır 2026-06-25 13:44:48 +03:00
  • dda760f0a9
    build(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7 (#1373) dependabot[bot] 2026-06-25 02:43:06 -04:00
  • 12b31e9d09
    build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 (#1374) dependabot[bot] 2026-06-25 02:42:46 -04:00
  • 39e33b5d16
    build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.1 to 1.14.0 (#1375) dependabot[bot] 2026-06-25 02:42:30 -04:00
  • cefa07dfe8
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.244.0 to 3.248.0 in /deploy (#1391) dependabot[bot] 2026-06-25 02:42:05 -04:00
  • f54f3b831c
    build(deps): bump the actions group with 2 updates (#1392) dependabot[bot] 2026-06-25 02:41:46 -04:00
  • fecef4f9ed
    fix: don't leak internal error detail in GET /v0/servers 500 response (#1338) Radoslav Dimitrov 2026-06-05 03:08:33 -04:00
  • ef29673221
    fix: client-cancelled GET /v0/servers returns 499 without error log (#1335) CK 2026-06-05 01:59:47 -05:00
  • 04623ed925
    fix(validators): harden mcp-name matching (PyPI/NuGet anchoring, comment-form safe) + cargo follow-ups (#1331) Radoslav Dimitrov 2026-06-05 02:28:41 -04:00
  • 7a6d1bc30a
    fix(cargo): harden README fetch, clarify status handling, strengthen tests (#1330) Radoslav Dimitrov 2026-06-04 17:34:54 -04:00
  • 227621f1d0
    build(deps): bump github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0 (#1334) dependabot[bot] 2026-06-04 16:03:35 -04:00
  • a1ffe33fba
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.243.0 to 3.244.0 in /deploy (#1333) dependabot[bot] 2026-06-04 16:02:45 -04:00
  • 78bc7006b0
    build(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.68.0 to 0.69.0 in the opentelemetry group (#1332) dependabot[bot] 2026-06-04 16:02:25 -04:00
  • 685e354b2f
    feat: add cargo (crates.io) as a package registry type (#1207) Wolfe-James 2026-06-03 10:56:43 -04:00
  • 5d91ce7c2e
    build(deps): bump the opentelemetry group with 5 updates (#1311) dependabot[bot] 2026-05-31 03:23:00 -04:00
  • 3a8e5428db
    build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys from 1.4.0 to 1.5.0 (#1312) dependabot[bot] 2026-05-31 03:22:40 -04:00
  • 51f37e8de5
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.242.0 to 3.243.0 in /deploy (#1313) dependabot[bot] 2026-05-31 03:22:20 -04:00
  • 224f50288d
    build(deps): bump the actions group with 2 updates (#1314) dependabot[bot] 2026-05-31 03:21:50 -04:00
  • b97cc9fbd6
    docs: update maintainer/collaborator matrix in README (#1324) Tadas Antanavicius 2026-05-31 00:20:31 -07:00
  • f0f03c0127
    build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.30.0 to 4.31.1 in /deploy (#1298) dependabot[bot] 2026-05-25 07:09:26 -04:00
  • 66cc039fac
    build(deps): bump golang.org/x/net to v0.55.0 (#1308) Radoslav Dimitrov 2026-05-25 07:02:10 -04:00
  • 5fe2c79e5c
    build(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 in the actions group (#1299) dependabot[bot] 2026-05-25 06:43:29 -04:00
  • a23a518592
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.238.0 to 3.242.0 in /deploy (#1297) dependabot[bot] 2026-05-25 06:42:44 -04:00
  • 3a8d268a87
    build(deps): bump github.com/danielgtaylor/huma/v2 from 2.37.3 to 2.38.0 (#1296) dependabot[bot] 2026-05-25 06:42:29 -04:00
  • b90f63f52c
    build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6 (#1295) dependabot[bot] 2026-05-25 06:42:13 -04:00
  • 49cea83c9d
    build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in /deploy (#1292) dependabot[bot] 2026-05-25 06:41:58 -04:00
  • deb5e7b24a
    chore(deps): reduce dependabot frequency from daily to weekly (#1284) Radoslav Dimitrov 2026-05-14 08:09:05 -04:00
  • 4819463aaa
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.237.0 to 3.238.0 in /deploy (#1283) dependabot[bot] 2026-05-14 08:01:51 -04:00
  • 4f75308d17
    deploy: update prod to v1.7.9 (#1282) Radoslav Dimitrov 2026-05-12 17:08:24 -04:00
  • 35b20719ee
    fix(validators/oci): fail closed on upstream rate limiting (#1281) v1.7.9 Radoslav Dimitrov 2026-05-12 16:59:59 -04:00
  • 4e319e81ff
    build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /deploy (#1279) dependabot[bot] 2026-05-12 07:21:18 -04:00
  • 276037b1ad
    docs(complete): align publish CLI flags with implementation (closes #767) (#1278) d 🔹 2026-05-11 21:01:52 +08:00
  • 1d36806960
    build(deps): bump golang.org/x/mod from 0.35.0 to 0.36.0 (#1271) dependabot[bot] 2026-05-11 05:10:51 -04:00
  • 7bc506f245
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.236.0 to 3.237.0 in /deploy (#1272) dependabot[bot] 2026-05-11 05:10:33 -04:00