@zereight/mcp-gitlab 2.2.5 → 2.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.ko.md +7 -4
- package/README.md +11 -7
- package/README.pt-BR.md +7 -4
- package/README.zh-CN.md +7 -4
- package/build/cli/args.js +2 -0
- package/build/config.js +4 -0
- package/build/deprecated-env.js +3 -1
- package/build/index.js +370 -86
- package/build/oauth-consent.js +323 -0
- package/build/oauth-proxy.js +99 -12
- package/build/oauth.js +147 -3
- package/build/schemas.js +25 -1
- package/build/stateless/types.js +2 -0
- package/build/tools/exposed-tools.js +14 -0
- package/build/tools/registry.js +24 -4
- package/build/tools/tool-descriptions.js +59 -17
- package/build/utils/graphql-query.js +1 -2
- package/build/utils/helpers.js +63 -4
- package/build/utils/safe-redirect-fetch.js +1 -1
- package/build/utils/url.js +1 -0
- package/package.json +4 -3
|
@@ -193,7 +193,7 @@ function withoutCredentialHeaders(options) {
|
|
|
193
193
|
* Runs on every redirect hop, so an upstream cannot steer the request to loopback,
|
|
194
194
|
* link-local instance metadata, or a private-range host.
|
|
195
195
|
*/
|
|
196
|
-
async function assertRedirectTargetAllowed(target, trusted,
|
|
196
|
+
async function assertRedirectTargetAllowed(target, trusted, _options) {
|
|
197
197
|
if (trusted) {
|
|
198
198
|
return;
|
|
199
199
|
}
|
package/build/utils/url.js
CHANGED
|
@@ -40,6 +40,7 @@ const DOT_SEGMENT_PATTERN = /(^|[\\/])\.\.?([\\/]|$)/;
|
|
|
40
40
|
/** A decoded value that starts with a path separator (absolute-path payload). */
|
|
41
41
|
const LEADING_SEPARATOR_PATTERN = /^[\\/]/;
|
|
42
42
|
/** NUL, newline and the other control characters: never valid in a path segment. */
|
|
43
|
+
// eslint-disable-next-line no-control-regex
|
|
43
44
|
const CONTROL_CHARACTER_PATTERN = /[\u0000-\u001f\u007f]/;
|
|
44
45
|
/**
|
|
45
46
|
* How many times a value is percent-decoded before the checks run. A payload can be
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@zereight/mcp-gitlab",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.3.0",
|
|
4
4
|
"mcpName": "io.github.zereight/gitlab-mcp",
|
|
5
5
|
"description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
|
|
6
6
|
"keywords": [
|
|
@@ -62,11 +62,11 @@
|
|
|
62
62
|
"test:oauth": "tsx test/oauth-tests.ts && node --import tsx/esm --test --experimental-test-isolation=none test/oauth-device-flow-tests.ts",
|
|
63
63
|
"test:list-merge-requests": "npm run build && tsx test/test-list-merge-requests.ts",
|
|
64
64
|
"test:approvals": "npm run build && tsx test/test-merge-request-approvals.ts",
|
|
65
|
-
"lint": "eslint .
|
|
65
|
+
"lint": "eslint .",
|
|
66
66
|
"check:runtime-deps": "node scripts/check-runtime-deps.mjs",
|
|
67
67
|
"check:skill-sync": "tsx scripts/check-skill-sync.ts",
|
|
68
68
|
"docs:tools": "tsx scripts/generate-tool-docs.ts && tsx scripts/generate-tool-coverage.ts",
|
|
69
|
-
"lint:fix": "eslint . --
|
|
69
|
+
"lint:fix": "eslint . --fix",
|
|
70
70
|
"release": "bash scripts/release.sh",
|
|
71
71
|
"release:mcp-registry": "bash scripts/publish_mcp_registry.sh",
|
|
72
72
|
"format": "prettier --write \"**/*.{js,ts,json,md}\"",
|
|
@@ -90,6 +90,7 @@
|
|
|
90
90
|
"zod": "^4.6.5"
|
|
91
91
|
},
|
|
92
92
|
"devDependencies": {
|
|
93
|
+
"@eslint/js": "^9.27.0",
|
|
93
94
|
"@types/express": "^5.0.2",
|
|
94
95
|
"@types/jmespath": "^0.15.2",
|
|
95
96
|
"@types/node": "^22.13.10",
|