Skip to content
This repository was archived by the owner on Nov 14, 2025. It is now read-only.

Commit d9f0e2a

Browse files
committed
chore(release): v1.8.2 [skip actions]
1 parent 68ec816 commit d9f0e2a

File tree

4 files changed

+44
-77
lines changed

4 files changed

+44
-77
lines changed

.changeset/refactor-ci-workflows-docker-security.md

Lines changed: 0 additions & 48 deletions
This file was deleted.

.changeset/silver-sheep-exist.md

Lines changed: 0 additions & 28 deletions
This file was deleted.

CHANGELOG.md

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,48 @@
11
# Changelog
22

3+
## 1.8.2
4+
5+
### Patch Changes
6+
7+
- [#199](https://github.com/sapientpants/deepsource-mcp-server/pull/199) [`68ec816`](https://github.com/sapientpants/deepsource-mcp-server/commit/68ec816bdf09bd29b1ade72b693de5a548a51b4d) - Refactor CI/CD workflows and improve Docker security
8+
9+
### CI/CD Improvements
10+
- **Unified Build Process**: Consolidated build into single job that creates reusable artifacts
11+
- **Build Artifacts**: Generated once and reused throughout workflow for consistency
12+
- **Build Manifest**: Added metadata tracking (SHA, timestamp, dependencies)
13+
- **Tag Creation**: Tags now created before building artifacts for better traceability
14+
- **Artifact Naming**: Include commit SHA for consistent naming across workflows
15+
16+
### Docker Support
17+
- **Multi-Platform Builds**: Added support for linux/amd64 and linux/arm64
18+
- **Docker Workflow**: New reusable workflow for container image builds
19+
- **Configuration**: Docker releases controlled via `ENABLE_DOCKER_RELEASE` variable
20+
21+
### Security Enhancements
22+
- **CodeQL Integration**: Added dedicated security scanning workflow
23+
- **Consolidated Scanning**: Unified security checks in reusable workflow
24+
- **Docker Security**: Container images run as non-root user (nodejs:1001)
25+
- **Trivy Scanning**: Automated vulnerability detection in container images
26+
- **Dependency Scanning**: Enhanced vulnerability reporting
27+
28+
### Developer Experience
29+
- **Issue Templates**: Added bug report and feature request templates
30+
- **PR Template**: Comprehensive pull request template with checklist
31+
- **Workflow Documentation**: Enhanced comments for better maintainability
32+
- **Better Validation**: Improved changeset validation in PR workflow
33+
34+
### Infrastructure
35+
- **NPM Packaging**: Dedicated job for package preparation with attestations
36+
- **SLSA Provenance**: Generate attestations for supply chain security
37+
- **Improved Permissions**: Updated for container registry access
38+
- **DeepSource Integration**: Maintained test coverage reporting
39+
40+
### Technical Details
41+
- Removed redundant `reusable-setup.yml` (merged into other workflows)
42+
- Better job dependency graph for parallel execution
43+
- Consistent secret passing (DEEPSOURCE_DSN)
44+
- Enhanced artifact retention strategies
45+
346
## 1.8.1
447

548
### Patch Changes

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "deepsource-mcp-server",
3-
"version": "1.8.1",
3+
"version": "1.8.2",
44
"description": "Model Context Protocol server for DeepSource",
55
"repository": {
66
"type": "git",

0 commit comments

Comments
 (0)