mcp-rubber-duck 1.2.2 → 1.2.4

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [1.2.4](https://github.com/nesquikm/mcp-rubber-duck/compare/v1.2.3...v1.2.4) (2025-11-17)
+
+
+### Bug Fixes
+
+* avoid npm ci on ARM64 by copying node_modules from builder ([b5a9777](https://github.com/nesquikm/mcp-rubber-duck/commit/b5a977772c44a138dc65554e8f2448be63fb0976))
+
+## [1.2.3](https://github.com/nesquikm/mcp-rubber-duck/compare/v1.2.2...v1.2.3) (2025-11-17)
+
+
+### Bug Fixes
+
+* resolve js-yaml security vulnerability with package override ([822a550](https://github.com/nesquikm/mcp-rubber-duck/commit/822a550397cb9b3e3966a8c5335c2ab1182bfd91))
+
 ## [1.2.2](https://github.com/nesquikm/mcp-rubber-duck/compare/v1.2.1...v1.2.2) (2025-09-17)
 
 ## [1.2.1](https://github.com/nesquikm/mcp-rubber-duck/compare/v1.2.0...v1.2.1) (2025-09-17)

package/Dockerfile

@@ -32,13 +32,15 @@ WORKDIR /app
 # Copy package files
 COPY package*.json ./
 
-# Install production dependencies only
-RUN npm ci --only=production && \
-    npm cache clean --force
+# Copy production node_modules from builder (avoids npm ci issues with QEMU)
+COPY --from=builder /app/node_modules ./node_modules
 
 # Copy built application from builder
 COPY --from=builder /app/dist ./dist
 
+# Remove dev dependencies to reduce image size
+RUN npm prune --production
+
 # Copy configuration examples
 COPY config/config.example.json ./config/
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-rubber-duck",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "description": "An MCP server that bridges to multiple OpenAI-compatible LLMs - your AI rubber duck debugging panel",
   "main": "dist/index.js",
   "type": "module",
@@ -61,5 +61,8 @@
     "ts-jest": "^29.0.0",
     "tsx": "^4.0.0",
     "typescript": "^5.0.0"
+  },
+  "overrides": {
+    "js-yaml": "^4.1.1"
   }
 }

package/.github/workflows/docker-build.yml

@@ -1,138 +0,0 @@
-name: 🐳 Docker Build & Deploy
-
-on:
-  push:
-    branches: [ master, main ]
-    paths-ignore:
-      - '**.md'
-      - 'docs/**'
-      - '.gitignore'
-  pull_request:
-    branches: [ master, main ]
-    paths-ignore:
-      - '**.md'
-      - 'docs/**'
-      - '.gitignore'
-
-env:
-  REGISTRY: ghcr.io
-  IMAGE_NAME: ${{ github.repository }}
-
-jobs:
-  test:
-    name: 🧪 Test
-    runs-on: ubuntu-latest
-    steps:
-      - name: 📥 Checkout
-        uses: actions/checkout@v4
-
-      - name: 📦 Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'npm'
-
-      - name: 📥 Install dependencies
-        run: npm ci
-
-      # Temporarily disabled lint to fix deployment
-      # - name: 🔍 Lint
-      #   run: npm run lint
-
-      - name: 🏗️ Build
-        run: npm run build
-
-      - name: 🔬 Type check
-        run: npm run typecheck
-
-      # Temporarily disabled tests to fix deployment
-      # - name: 🧪 Test
-      #   run: npm test
-
-  build-and-push:
-    name: 🐳 Build & Push
-    needs: test
-    runs-on: ubuntu-latest
-    # Only build images on push to master (not PRs)
-    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
-    permissions:
-      contents: read
-      packages: write
-
-    steps:
-      - name: 📥 Checkout
-        uses: actions/checkout@v4
-
-      - name: 🛠️ Set up QEMU
-        uses: docker/setup-qemu-action@v3
-
-      - name: 🛠️ Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: 🔑 Login to Container Registry
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: 🏷️ Extract metadata
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-          tags: |
-            type=ref,event=branch
-            type=ref,event=pr
-            type=raw,value=latest,enable={{is_default_branch}}
-            type=raw,value={{date 'YYYY-MM-DD'}},enable={{is_default_branch}}
-          labels: |
-            org.opencontainers.image.title=MCP Rubber Duck
-            org.opencontainers.image.description=Multi-platform MCP server for multiple OpenAI-compatible LLMs
-
-      - name: 🐳 Build and push Docker image
-        id: build
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          platforms: linux/amd64,linux/arm64
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-          build-args: |
-            BUILDKIT_INLINE_CACHE=1
-
-      - name: 📝 Image digest
-        run: echo ${{ steps.build.outputs.digest }}
-
-      - name: 🔧 Make package public
-        if: success()
-        run: |
-          # Wait a moment for package to appear
-          sleep 10
-
-          # Try to make package public (may fail if already public)
-          gh api --method PATCH \
-            "user/packages/container/${{ github.event.repository.name }}" \
-            --field visibility=public \
-            --silent || echo "Package may already be public or visibility change failed"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: 📊 Image size
-        if: success()
-        run: |
-          echo "🎉 **Docker Image Built Successfully!**" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "📦 **Image Details:**" >> $GITHUB_STEP_SUMMARY
-          echo "- 🏷️ **Tags:** \`${{ steps.meta.outputs.tags }}\`" >> $GITHUB_STEP_SUMMARY
-          echo "- 🏗️ **Platforms:** AMD64, ARM64" >> $GITHUB_STEP_SUMMARY
-          echo "- 📍 **Registry:** ${{ env.REGISTRY }}" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "🚀 **Quick Start:**" >> $GITHUB_STEP_SUMMARY
-          echo "\`\`\`bash" >> $GITHUB_STEP_SUMMARY
-          echo "docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest" >> $GITHUB_STEP_SUMMARY
-          echo "docker compose up -d" >> $GITHUB_STEP_SUMMARY
-          echo "\`\`\`" >> $GITHUB_STEP_SUMMARY