Commit graph

  • fe0cb3bfcb
    build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in the actions group (#1265) dependabot[bot] 2026-05-08 07:57:35 -04:00
  • 8af641cf1c
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.235.0 to 3.236.0 in /deploy (#1264) dependabot[bot] 2026-05-08 07:57:18 -04:00
  • d93f8f78a0
    build(deps): bump cloud.google.com/go/kms from 1.30.0 to 1.31.0 (#1263) dependabot[bot] 2026-05-08 07:56:59 -04:00
  • f5fe2e97f6
    build(deps): bump golang.org/x/net from v0.52.0 to v0.53.0 (#1269) Radoslav Dimitrov 2026-05-08 07:33:10 -04:00
  • 718735cfbb
    docs(authentication): note OpenSSL 3.x requirement for Ed25519 (#1253) Andrew Cunliffe 2026-05-07 07:42:37 -07:00
  • 321337c810
    docs: add ToolHive Registry Server to community projects (#1261) Radoslav Dimitrov 2026-05-07 10:36:03 -04:00
  • 6ae2d54e73
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.234.0 to 3.235.0 in /deploy (#1259) dependabot[bot] 2026-05-06 17:34:08 -04:00
  • 2b90d93712
    deploy: update prod to v1.7.8 (#1256) Radoslav Dimitrov 2026-05-05 06:14:49 -04:00
  • 4e147072f0
    metrics: stop counting client-cancelled requests as server errors (#1255) v1.7.8 Radoslav Dimitrov 2026-05-05 05:58:05 -04:00
  • 6d6a887174
    build(deps): bump pulumi/actions from 6.6.1 to 7.0.0 in the actions group (#1254) dependabot[bot] 2026-05-05 03:50:20 -04:00
  • 1b9f69e81b
    deploy: update prod to v1.7.7 (#1251) Radoslav Dimitrov 2026-05-04 10:07:32 -04:00
  • f5f40bd980
    fix(auth/http): extend SSRF blocklist to IPv6 6to4/NAT64/site-local prefixes (#1250) v1.7.7 Radoslav Dimitrov 2026-05-04 09:41:23 -04:00
  • 78b7bbde07
    fix(validators): reject HTML metacharacters and whitespace in websiteUrl (#1249) Radoslav Dimitrov 2026-05-04 09:26:50 -04:00
  • fbfd63ced8
    fix(ui): encode publisher-controlled URLs for href attribute context (#1248) Radoslav Dimitrov 2026-05-04 09:25:41 -04:00
  • 7a4216c528
    refactor: rename readBody to readErrorBody and cap body size (#1246) Radoslav Dimitrov 2026-05-04 07:09:57 -04:00
  • 6f9bd6661c
    refactor: extract readBody helper to remove duplicate io.ReadAll calls (#1241) Mesut Oezdil 2026-05-04 12:57:02 +02:00
  • dfaa8f3b82
    auth/oidc: test slice-typed extra claims comparison (#1245) Radoslav Dimitrov 2026-05-04 06:52:12 -04:00
  • 811046c4ce
    auth/oidc: support slice-typed extra claims via overlap match (#1238) Sai Asish Y 2026-05-04 03:24:34 -07:00
  • f3308d16f5
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.233.0 to 3.234.0 in /deploy (#1237) dependabot[bot] 2026-05-04 06:12:32 -04:00
  • 648da259b0
    build(deps): bump github.com/caarlos0/env/v11 from 11.4.0 to 11.4.1 (#1236) dependabot[bot] 2026-05-04 06:12:19 -04:00
  • 23f4fda297
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.232.0 to 3.233.0 in /deploy (#1234) dependabot[bot] 2026-05-01 03:19:42 -04:00
  • 46bbe0dba3
    build(deps): bump cloud.google.com/go/kms from 1.29.0 to 1.30.0 (#1233) dependabot[bot] 2026-05-01 03:19:24 -04:00
  • 42092742ce
    deploy: update prod to v1.7.6 (#1232) Radoslav Dimitrov 2026-04-29 21:08:54 -04:00
  • db43896209
    docs: document GitHub OIDC audience binding for self-hosters and CI users (#1230) v1.7.6 Radoslav Dimitrov 2026-04-29 20:56:53 -04:00
  • 3f89fc2b1f
    auth: bind GitHub OIDC token exchange to a per-deployment audience (#1229) Radoslav Dimitrov 2026-04-29 20:27:26 -04:00
  • 88bbb851ad
    deploy: update prod to v1.7.5 (#1228) Radoslav Dimitrov 2026-04-29 19:32:54 -04:00
  • 1201cbd82b
    security: fix open redirect and add small hardening (#1227) v1.7.5 Radoslav Dimitrov 2026-04-29 19:14:00 -04:00
  • f7663fe91a
    deploy: update prod to v1.7.4 (#1226) Radoslav Dimitrov 2026-04-29 14:43:18 -04:00
  • 5dcae5b3ce
    fix(deploy): bump registry pod memory to match doubled pgxpool size (#1225) v1.7.4 Radoslav Dimitrov 2026-04-29 14:05:09 -04:00
  • 0a97e59ecb
    deploy: update prod to v1.7.3 (#1223) Radoslav Dimitrov 2026-04-28 17:50:38 -04:00
  • 736d376858
    fix(db): raise pgxpool MaxConns + PG max_connections + set PG resources (#1221) v1.7.3 Radoslav Dimitrov 2026-04-28 15:21:24 -04:00
  • 54cbe2473c
    fix(list): use JSONB containment for RemoteURL filter (GIN-indexable) (#1220) Radoslav Dimitrov 2026-04-28 15:03:21 -04:00
  • a490b6f1ec
    build(deps): bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 in the actions group (#1218) dependabot[bot] 2026-04-28 03:23:31 -04:00
  • 3764acad40
    build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.29.0 to 4.30.0 in /deploy (#1217) dependabot[bot] 2026-04-28 03:23:14 -04:00
  • a4d9d82920
    deploy: update prod to v1.7.2 (#1216) Radoslav Dimitrov 2026-04-27 15:58:11 -04:00
  • 27af672c5e
    fix(list): use row-constructor cursor + restore per-phase publish timings + enable pg_stat_statements (#1215) v1.7.2 Radoslav Dimitrov 2026-04-27 15:35:59 -04:00
  • 762a4849a6
    deploy: update prod to v1.7.1 (#1212) Radoslav Dimitrov 2026-04-27 12:44:10 -04:00
  • c6d3096d1b
    fix(deploy): manage Cloud Resource Manager API enablement in Pulumi (#1213) Radoslav Dimitrov 2026-04-27 12:32:22 -04:00
  • b24d6c7657
    fix: harden registry availability and add publish phase timings (#1211) v1.7.1 Radoslav Dimitrov 2026-04-27 09:09:50 -04:00
  • 7722031739
    deploy: update prod to v1.7.0 (#1205) Radoslav Dimitrov 2026-04-25 13:01:08 -04:00
  • 0cb1f6bf52
    fix: recalculate isLatest after status changes (#1081) (#1201) v1.7.0 Radoslav Dimitrov 2026-04-25 11:59:28 -04:00
  • c5f50e817b
    fix(auth): better DNS verification errors and wrong-selector hint (#1202) Radoslav Dimitrov 2026-04-25 11:22:06 -04:00
  • 8b893ae1f1
    docs: recommend namespaced subkeys inside publisher-provided (#1197) Radoslav Dimitrov 2026-04-25 10:15:32 -04:00
  • ccb7057c33
    docs: note PostgreSQL requirement for prebuilt Docker image (#1196) Radoslav Dimitrov 2026-04-25 10:15:00 -04:00
  • aaa634ebb6
    fix(publisher): honor mcpName as the authoritative server name in init (#1195) Radoslav Dimitrov 2026-04-25 10:14:11 -04:00
  • 7c446e75ad
    feat(oci): add support for Quay.io registry (#1150) Mikel Olasagasti Uranga 2026-04-24 12:11:46 +02:00
  • a1a3303af9
    feat(publisher): copy version from package.json and prefer mcpName in init (#1145) Yusufhan Saçak 2026-04-24 12:47:24 +03:00
  • 35b124379b
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.231.0 to 3.232.0 in /deploy (#1194) dependabot[bot] 2026-04-24 04:54:09 -04:00
  • dac0982f6d
    docs: signpost non-npm publishers to package-types from quickstart (#1192) Ashwanthram K L 2026-04-24 03:51:21 +05:30
  • d8a1ea4e58
    fix: update openapi.yml to include statusChangedAt (#1187) Jeff MAURY 2026-04-24 00:15:43 +02:00
  • fa450110e4
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.230.0 to 3.231.0 in /deploy (#1176) dependabot[bot] 2026-04-21 09:06:55 +00:00
  • 4be2234d3f
    build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.28.0 to 4.29.0 in /deploy (#1177) dependabot[bot] 2026-04-21 05:03:22 -04:00
  • 85c95569a7
    build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 in /deploy (#1180) dependabot[bot] 2026-04-21 05:03:01 -04:00
  • cc48844ebc
    build(deps): bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 (#1188) dependabot[bot] 2026-04-21 05:02:43 -04:00
  • b6ab23cdea
    build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 in the actions group (#1189) dependabot[bot] 2026-04-21 05:02:23 -04:00
  • 70b5f457c8
    deploy: update prod to v1.6.0 (#1172) Radoslav Dimitrov 2026-04-15 10:28:33 -04:00
  • 8df5a7711d
    fix(publisher): omit repository when URL cannot be detected (#1149) v1.6.0 Yusufhan Saçak 2026-04-15 14:16:23 +03:00
  • 90baa0528f
    fix: store tokens in ~/.config/mcp-publisher/ instead of cwd (#1166) Radoslav Dimitrov 2026-04-15 03:23:07 -04:00
  • 77bbd41fd3
    build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in the actions group (#1154) dependabot[bot] 2026-04-14 05:20:05 -04:00
  • 0c5dde243b
    build(deps): bump github.com/google/go-containerregistry from 0.21.4 to 0.21.5 (#1162) dependabot[bot] 2026-04-14 05:19:36 -04:00
  • 1e83267610
    build(deps): bump cloud.google.com/go/kms from 1.27.0 to 1.29.0 (#1163) dependabot[bot] 2026-04-14 05:19:09 -04:00
  • 07fa85f68b
    build(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 (#1140) dependabot[bot] 2026-04-09 18:16:23 -04:00
  • fbea08a348
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.229.0 to 3.230.0 in /deploy (#1141) dependabot[bot] 2026-04-09 14:20:55 -04:00
  • 83f8ea7cff
    build(deps): bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 in /deploy (#1139) dependabot[bot] 2026-04-09 14:20:33 -04:00
  • 607d52ff20
    build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#1114) dependabot[bot] 2026-04-09 14:20:12 -04:00
  • 5f81cf3336
    build(deps): bump cloud.google.com/go/kms from 1.26.0 to 1.27.0 (#1111) dependabot[bot] 2026-04-09 14:19:50 -04:00
  • 0fc4606be2
    Stop pinning Go to patch versions, use stable in CI (#1137) Radoslav Dimitrov 2026-04-09 11:57:21 -04:00
  • 9b32a5c187
    build(deps): bump docker/login-action from 4.0.0 to 4.1.0 in the actions group (#1113) dependabot[bot] 2026-04-08 05:39:37 -04:00
  • 5d0edc97bf
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.228.0 to 3.229.0 in /deploy (#1112) dependabot[bot] 2026-04-08 05:38:52 -04:00
  • 53af38ee38
    build(deps): bump the opentelemetry group across 1 directory with 6 updates (#1134) dependabot[bot] 2026-04-08 05:33:36 -04:00
  • 81bc5ff653
    build(deps): bump github.com/google/go-containerregistry from 0.21.3 to 0.21.4 (#1131) dependabot[bot] 2026-04-08 05:33:17 -04:00
  • 2a6b00dde7
    build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.1 (#1092) dependabot[bot] 2026-04-02 00:10:21 -04:00
  • fff1664e3d
    build(deps): bump the actions group across 1 directory with 2 updates (#1105) dependabot[bot] 2026-04-02 00:04:08 -04:00
  • 7be5dd23c0
    build(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 in /deploy (#1104) dependabot[bot] 2026-04-02 00:03:51 -04:00
  • bc8ff18495
    build(deps): bump github.com/danielgtaylor/huma/v2 from 2.37.2 to 2.37.3 (#1098) dependabot[bot] 2026-04-02 00:03:28 -04:00
  • f30e540117
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.226.0 to 3.228.0 in /deploy (#1094) dependabot[bot] 2026-04-02 00:03:02 -04:00
  • c5c4b9e889
    build(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 in the actions group (#1085) dependabot[bot] 2026-03-22 18:53:07 +02:00
  • ddb93bd3a8
    Add contributing guidelines to prevent seed.json PRs (#1079) Radoslav Dimitrov 2026-03-22 16:42:18 +02:00
  • 9c180f4d33
    build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#1076) dependabot[bot] 2026-03-19 23:56:53 +02:00
  • 29ed71a8b8
    build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /deploy (#1077) dependabot[bot] 2026-03-19 23:52:06 +02:00
  • 9c7c8805cc
    build(deps): bump github.com/google/go-containerregistry from 0.21.2 to 0.21.3 (#1073) dependabot[bot] 2026-03-19 23:51:32 +02:00
  • 52178183f3
    build(deps): bump github.com/danielgtaylor/huma/v2 from 2.35.0 to 2.37.2 (#989) dependabot[bot] 2026-03-16 17:06:31 +02:00
  • a94c56a78f
    build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.27.0 to 4.28.0 in /deploy (#1056) dependabot[bot] 2026-03-13 11:53:31 +01:00
  • 01b1ae2555
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.225.1 to 3.226.0 in /deploy (#1057) dependabot[bot] 2026-03-13 01:30:03 +01:00
  • 00de8fac8b
    build(deps): bump golang.org/x/mod from 0.33.0 to 0.34.0 (#1054) dependabot[bot] 2026-03-12 11:46:51 +01:00
  • b941ee3674
    Remove .mdx suffixes from internal doc links for Mintlify (#1052) Jonathan Hefner 2026-03-12 05:46:30 -05:00
  • b112ac3335
    build(deps): bump the actions group with 2 updates (#1049) dependabot[bot] 2026-03-11 10:44:47 +01:00
  • 2575290393
    chore(deploy): bump production image tag to 1.5.0 (#1043) Tadas Antanavicius 2026-03-07 06:53:30 -08:00
  • c0ecfd5a65
    build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.2 (#1026) dependabot[bot] 2026-03-07 15:31:08 +02:00
  • 03d551dbab
    build(deps): bump the opentelemetry group with 6 updates (#1044) dependabot[bot] 2026-03-07 15:22:17 +02:00
  • 7b0c411928
    Bump go (#1041) v1.5.0 Radoslav Dimitrov 2026-03-07 00:57:51 +02:00
  • 7462b3c34e
    fix(ci): use deploy/go.mod for deploy workflow Go version and bump root Go to 1.25.8 (#1040) Tadas Antanavicius 2026-03-06 14:20:44 -08:00
  • 6c500c52e3
    build(deps): bump cloud.google.com/go/kms from 1.25.0 to 1.26.0 (#985) dependabot[bot] 2026-03-06 02:25:23 +02:00
  • de6e9839ec
    build(deps): bump the opentelemetry group with 6 updates (#1025) dependabot[bot] 2026-03-06 02:16:23 +02:00
  • b738501d2f
    build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.25.0 to 4.27.0 in /deploy (#1024) dependabot[bot] 2026-03-06 02:16:00 +02:00
  • 8575244d1f
    build(deps): bump github.com/caarlos0/env/v11 from 11.3.1 to 11.4.0 (#995) dependabot[bot] 2026-03-06 02:14:22 +02:00
  • febc8dc6a1
    build(deps): bump the actions group across 1 directory with 5 updates (#1031) dependabot[bot] 2026-03-06 02:11:03 +02:00
  • a5b152f212
    build(deps): bump github.com/docker/cli from 29.0.3+incompatible to 29.2.0+incompatible (#1032) dependabot[bot] 2026-03-06 02:10:21 +02:00
  • 26564484ac
    build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy (#1034) dependabot[bot] 2026-03-06 02:10:02 +02:00
  • cb4807a7fb
    add details of include_deleted in openapi spec (#1014) Preeti Dewani 2026-03-01 20:05:50 +05:30