Release Notes

Overview

This page summarizes recent improvements, compliance updates, and version history. For full details, see the repository changelog.

• Full changelog: https://github.com/jotajotape/github-go-server-mcp/blob/main/CHANGELOG.md
• Safety configuration example: safety.json.example

Recent Changes

Unreleased – Code Quality & MCP Compliance

• MCP specification compliance reviewed on 2026-02-11.
• MCP compliance score: 98/100 → 99/100.
• Spec version: MCP 2025-11-25 verified.
• MUST requirements: 11/11; SHOULD requirements: 6/7.
• Tool capability listChanged: true declared; annotations system in place across 22 admin tools.
• JSON-RPC 2.0 and stdio transport confirmed.

Modular Architecture Refactor (2026-02-11)

• server.go reduced from 1,377 to 728 lines; tool definitions split into dedicated files.
• enterWorkingDir() helper removed ~105 duplicated lines.
• pkg/git/operations.go split into focused modules; largest file now 967 lines.
• Improved parallel compilation and readability; tests remain passing.

v3.0.1 (2026-01-31) – MCP Protocol Compliance

• Protocol version updated to 2025-11-25.
• Added listChanged: true capability to tools.
• Added titles and annotations to all tools; behavioral hints for 22 admin tools.
• Compliance: all MUST met; 18/20 SHOULD met.

v3.0.0 (2026-01-31) – Administrative Controls & Safety System

• Added 22 admin tools: repository settings, branch protection, webhooks, collaborators, and teams.
• Introduced 4-tier safety system with strict/moderate/permissive/disabled modes.
• Confirmation tokens (SHA256, single-use, 5-minute expiration) for high/critical operations.
• Dry-run mode and audit logging with rotation (10MB, 5 backups).
• Git-free file operations via API: list contents, download file, download repo, pull repo.
• Git detection and dynamic tool filtering: 83 tools with Git, 48 without.
• SSRF prevention for webhook URLs; permission validation across admin operations.

v2.5.0 (2026-01-27) – Dependency Updates

• Go 1.24.0 → 1.25.0 (toolchain go1.25.6).
• go-github v77.0.0 → v81.0.0; oauth2 v0.33.0 → v0.34.0.
• Vendor directory updated; imports refreshed.

Version History

• v3.0.1 (2026-01-31): MCP protocol compliance improvements.
• v3.0.0 (2026-01-31): Admin controls and 4-tier safety system.
• v2.5.0 (2026-01-27): Go 1.25 and dependency updates.
• v2.4.0 (2025-01-02): Linting with golangci-lint.
• v2.3.0 (2025-11-02): Restructure to Go best practices.
• v2.2.0 (2024-10-23): Multi-profile support and hybrid Git/API system.

Responsible use

Validate parameters, repositories, and scopes before executing administrative or destructive operations. We are not responsible for misuse or resulting damage.