Skip to content

v0.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Jul 19:45
· 21 commits to main since this release
v0.2.0
74a263b

Release Notes: v0.2.0

Summary

v0.2.0 expands the read-only CrowdSec operator workflow with health reporting and decision inventory, while keeping write actions prepare-only and audited.

Added

  • crowdsec_health(include_sample_counts=false) reports backend mode, LAPI presence and reachability, cscli path diagnostics, default window, write audit path, and exposed capabilities without exposing secrets. Supported reads remain LAPI-backed; actual cscli reads or execution are not supported.
  • decision_inventory(...) summarizes active CrowdSec decisions with filters, grouped counts, expiring-soon decisions, stale or long-lived decisions, and representative rows.
  • Decision inventory examples in docs/decision-inventory-example.md.
  • Project roadmap in docs/roadmap.md.
  • Agent instructions in AGENTS.md, plus runtime agent guidance in docs/agent-usage.md.
  • Local development workflow notes in docs/development.md.
  • Worktree bootstrap helper for local runtime files.
  • README contents and fuller project document index.

Changed

  • Reorganized documentation by audience: user-facing README/onboarding, agent instructions, development workflow, roadmap, and release process.
  • Clarified roadmap priorities around read-side tools before production write execution.
  • Relaxed PR metadata validation for dependency-update automation.

Fixed

  • IP write tools now remain prepare-only even if a legacy execute flag is sent.
  • Improved MCP logging around client calls and startup capability reporting.
  • Improved CrowdSec client behavior around backend health and LAPI JSON reads.
  • Ignored local compose and write-audit files.

Security And Safety

  • CrowdSec-only boundary is unchanged.
  • Write actions remain single-IP, prepare-only, and audited.
  • No MCP-executed CrowdSec mutations were added.
  • No Docker socket, metrics, logs, dashboard, Snort, or reverse-proxy access was added.

Upgrade Notes

  • Update deployments to use ghcr.io/frli4797/crowdsec-ops-mcp:0.2.0 after the image is published.
  • Existing configuration variables remain compatible.

Validation

  • .venv/bin/pytest
  • .venv/bin/python scripts/check_version.py v0.2.0
  • .venv/bin/python -m build
  • Docker image build
Assets 2
Loading