@boringstudio_org/gitea-mcp 1.6.1 → 1.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,4 +1,4 @@
1
- name: Release
1
+ name: Release and Publish
2
2
 
3
3
  on:
4
4
  push:
@@ -25,6 +25,7 @@ jobs:
25
25
  uses: actions/setup-node@v4
26
26
  with:
27
27
  node-version: '24'
28
+ registry-url: 'https://registry.npmjs.org'
28
29
 
29
30
  - name: Configure Git
30
31
  run: |
@@ -41,3 +42,8 @@ jobs:
41
42
  run: git push --follow-tags origin main
42
43
  env:
43
44
  GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}
45
+
46
+ - name: Publish to NPM
47
+ run: npm publish
48
+ env:
49
+ NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
package/CHANGELOG.md CHANGED
@@ -2,6 +2,15 @@
2
2
 
3
3
  All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
4
4
 
5
+ ### [1.7.1](https://git.boringstudio.by/BoringStudio/mcp-gitea/compare/v1.7.0...v1.7.1) (2026-01-15)
6
+
7
+ ## [1.7.0](https://git.boringstudio.by/BoringStudio/mcp-gitea/compare/v1.6.1...v1.7.0) (2026-01-15)
8
+
9
+
10
+ ### Features
11
+
12
+ * update readme with security details ([#7](https://git.boringstudio.by/BoringStudio/mcp-gitea/issues/7)) ([9c719bb](https://git.boringstudio.by/BoringStudio/mcp-gitea/commit/9c719bbf6f4e46bcba98f3656f899c9e11fd1e5e))
13
+
5
14
  ### [1.6.1](https://git.boringstudio.by/BoringStudio/mcp-gitea/compare/v1.6.0...v1.6.1) (2026-01-15)
6
15
 
7
16
  ## [1.6.0](https://git.boringstudio.by/BoringStudio/mcp-gitea/compare/v1.4.1...v1.6.0) (2026-01-15)
package/README.md CHANGED
@@ -12,6 +12,11 @@ This package is designed to be used as a standalone server or imported by a gate
12
12
  * **Analysis:** Analyze issues with AI prompts.
13
13
  * **Shell:** Execute safe git commands in WSL (`run_safe_shell`).
14
14
 
15
+ ## 🔒 Security
16
+
17
+ * **Allowed Paths:** Restricted via `MCP_ALLOWED_PATHS` environment variable.
18
+ * **Git Safety:** Only whitelisted git subcommands are allowed. Global flags are blocked.
19
+
15
20
  ## 📦 Installation
16
21
 
17
22
  ```bash
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@boringstudio_org/gitea-mcp",
3
- "version": "1.6.1",
3
+ "version": "1.7.1",
4
4
  "description": "A Gitea MCP Server for interacting with repositories, issues, and more.",
5
5
  "type": "module",
6
6
  "main": "index.js",
@@ -1,28 +0,0 @@
1
- name: Publish to NPM
2
-
3
- on:
4
- push:
5
- tags:
6
- - 'v*'
7
- workflow_dispatch:
8
-
9
- jobs:
10
- publish:
11
- runs-on: ubuntu-latest
12
- steps:
13
- - name: Checkout
14
- uses: actions/checkout@v4
15
-
16
- - name: Setup Node.js
17
- uses: actions/setup-node@v4
18
- with:
19
- node-version: '24'
20
- registry-url: 'https://registry.npmjs.org'
21
-
22
- - name: Install dependencies
23
- run: npm ci
24
-
25
- - name: Publish
26
- run: npm publish
27
- env:
28
- NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}