v1.1.0 - MCP 2025-11-25 Protocol Compliance & Security Hardening #25

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

neverinfamous merged 48 commits into master from feature/enhanced-log-sanitization

Jan 29, 2026

.github/workflows/codeql.yml

Original file line number	Diff line number	Diff line change
Expand Up		@@ -48,4 +48,3 @@ jobs:
		uses: github/codeql-action/analyze@v4
		with:
		category: "/language:${{matrix.language}}"

.github/workflows/dependabot-auto-merge.yml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -3,8 +3,8 @@ name: Dependabot auto-merge
  
    on:

      pull_request:

        paths:

          - 'package*.json'

          - '.github/workflows/dependabot-auto-merge.yml'

          - "package*.json"

          - ".github/workflows/dependabot-auto-merge.yml"

    permissions:

      pull-requests: write

    @@ -19,7 +19,7 @@ jobs:
  
            id: metadata

            uses: dependabot/fetch-metadata@v2

            with:

              github-token: '${{ secrets.GITHUB_TOKEN }}'

              github-token: "${{ secrets.GITHUB_TOKEN }}"

          - name: Enable auto-merge for Dependabot PRs

            if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' }}

.github/workflows/docker-publish.yml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -3,7 +3,7 @@ name: Build and Push Docker Images
  
    on:

      # Only run after lint-and-test completes successfully

      workflow_run:

        workflows: ['Lint and Test']

        workflows: ["Lint and Test"]

        types: [completed]

        branches: [master]

    @@ -266,7 +266,7 @@ jobs:
  
              password: ${{ secrets.DOCKER_PASSWORD }}

              repository: ${{ env.IMAGE_NAME }}

              readme-filepath: ./DOCKER_README.md

              short-description: 'MCP Server with 203 tools, connection pooling, HTTP/SSE, OAuth 2.1, Code Mode, & tool filtering.'

              short-description: "MCP Server with 203 tools, connection pooling, HTTP/SSE, OAuth 2.1, Code Mode, & tool filtering."

          - name: Deployment Summary

            if: github.ref == 'refs/heads/master'

.github/workflows/lint-and-test.yml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -24,7 +24,7 @@ jobs:
  
            uses: actions/setup-node@v6

            with:

              node-version: ${{ matrix.node-version }}

              cache: 'npm'

              cache: "npm"

          - name: Install dependencies

            run: npm ci

    @@ -50,8 +50,8 @@ jobs:
  
          - name: Setup Node.js

            uses: actions/setup-node@v6

            with:

              node-version: '24.x'

              cache: 'npm'

              node-version: "24.x"

              cache: "npm"

          - name: Install dependencies

            run: npm ci

.github/workflows/publish-npm.yml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -6,9 +6,9 @@ on:
  
      workflow_dispatch:

        inputs:

          version:

            description: 'Version to publish (must match VERSION file or package.json)'

            description: "Version to publish (must match VERSION file or package.json)"

            required: false

            default: ''

            default: ""

    permissions:

      contents: read

    @@ -30,9 +30,9 @@ jobs:
  
          - name: Setup Node.js

            uses: actions/setup-node@v6

            with:

              node-version: '24.x'

              registry-url: 'https://registry.npmjs.org'

              cache: 'npm'

              node-version: "24.x"

              registry-url: "https://registry.npmjs.org"

              cache: "npm"

          - name: Install dependencies

            run: npm ci

.github/workflows/security-update.yml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -3,20 +3,20 @@ name: Security Update Check
  
    on:

      schedule:

        # Run weekly on Sundays at 2 AM UTC

        - cron: '0 2 * * 0'

        - cron: "0 2 * * 0"

      push:

        branches: [master]

        paths:

          - 'Dockerfile'

          - 'package.json'

          - 'package-lock.json'

          - '.trivyignore'

          - "Dockerfile"

          - "package.json"

          - "package-lock.json"

          - ".trivyignore"

      pull_request:

        branches: [master]

        paths:

          - 'Dockerfile'

          - 'package.json'

          - 'package-lock.json'

          - "Dockerfile"

          - "package.json"

          - "package-lock.json"

      workflow_dispatch:

    permissions:

    @@ -51,31 +51,31 @@ jobs:
  
            uses: aquasecurity/trivy-action@0.33.1

            with:

              image-ref: security-test:latest

              format: 'sarif'

              output: 'trivy-results.sarif'

              exit-code: '0'

              format: "sarif"

              output: "trivy-results.sarif"

              exit-code: "0"

              ignore-unfixed: true

              severity: 'CRITICAL,HIGH,MEDIUM'

              trivyignores: '.trivyignore'

              skip-dirs: '/usr/local/lib/node_modules/npm'

              severity: "CRITICAL,HIGH,MEDIUM"

              trivyignores: ".trivyignore"

              skip-dirs: "/usr/local/lib/node_modules/npm"

          - name: Upload Trivy scan results

            uses: github/codeql-action/upload-sarif@v4

            if: always()

            with:

              sarif_file: 'trivy-results.sarif'

              sarif_file: "trivy-results.sarif"

          # Run table scan (blocking) after SARIF is uploaded

          - name: Run Trivy vulnerability scanner

            uses: aquasecurity/trivy-action@0.33.1

            with:

              image-ref: security-test:latest

              format: 'table'

              exit-code: '1'

              format: "table"

              exit-code: "1"

              ignore-unfixed: true

              severity: 'CRITICAL,HIGH,MEDIUM'

              trivyignores: '.trivyignore'

              skip-dirs: '/usr/local/lib/node_modules/npm'

              severity: "CRITICAL,HIGH,MEDIUM"

              trivyignores: ".trivyignore"

              skip-dirs: "/usr/local/lib/node_modules/npm"

          - name: Create security issue if vulnerabilities found

            if: failure()

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

v1.1.0 - MCP 2025-11-25 Protocol Compliance & Security Hardening #25

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!

Uh oh!