[release] Release Highlights: v0.3.25

[github-actions]

🌟 Release Highlights

This release focuses on security hardening, proxy reliability improvements, and documentation alignment — making MCP Gateway more robust and easier to deploy.

🔒 Security Fix

Environment variable exposure in tool response filters patched (#7208)

Tool response filters compiled without environment isolation could expose environment variables — including GITHUB_TOKEN — if a filter referenced $ENV. This release disables $ENV access in all CompileToolResponseFilter calls and aligns validation compile options with runtime behavior, eliminating a class of filter bypass. All users are encouraged to upgrade.

🐛 Bug Fixes

Proxy no longer fails closed on unrecognized REST endpoints (#7227)

The proxy previously returned 403 for any GET endpoint not recognized by the routing table — repeatedly breaking gh CLI and agent startup when GitHub added or varied safe endpoints. The proxy now uses a three-tier model:

1. Explicit metadata passthrough (known safe endpoints)
2. Full DIFC pipeline for recognized data endpoints
3. Passthrough with empty labels for unrecognized reads

This greatly improves compatibility with evolving GitHub API surfaces without sacrificing DIFC enforcement on known routes. See Proxy Mode docs for details.

run_containerized.sh now accepts MCP_GATEWAY_AGENT_ID (#7212)

The containerized entrypoint script previously required MCP_GATEWAY_API_KEY, but the README Quick Start and environment validation already used MCP_GATEWAY_AGENT_ID as the canonical name — causing immediate startup failure for anyone following the docs. The script now accepts MCP_GATEWAY_AGENT_ID (preferred) with graceful fallback to the deprecated MCP_GATEWAY_API_KEY.

📚 Documentation

Containerized deployment docs aligned with canonical env variable (#7229)

CONTRIBUTING.md and related docs now consistently describe MCP_GATEWAY_AGENT_ID as the required deployment gate variable, with MCP_GATEWAY_API_KEY called out explicitly as a deprecated alias. See Environment Variables for the full variable reference.

🔍 Observability

DIFC reflection now has debug logging (#7173)

BuildReflectResponse now emits structured debug logs under the difc:reflect namespace — logging enforcement mode, agent registry counts, skipped agents, and response construction. Enable with DEBUG=difc:* ./awmg --config config.toml.

🐳 Docker Image

The Docker image for this release is available at:

docker pull ghcr.io/github/gh-aw-mcpg:v0.3.25
# or
docker pull ghcr.io/github/gh-aw-mcpg:latest

Supported platforms: linux/amd64, linux/arm64

---

For complete details, see the full release notes.

Generated by Release · sonnet46 737.8K · ◷