Skip to content

European Parliament MCP Server v1.3.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 May 06:44
· 321 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.3.2
9a7ecdb

Highlights

🏗️ Infrastructure & Performance

  • chore(deps-dev): bump knip from 6.12.1 to 6.12.2 in the development-dependencies group @dependabot[bot] (#434)
  • chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 @dependabot[bot] (#433)
  • Improve workflow caching correctness, external registry resilience, and CI supply-chain hardening @copilot-swe-agent[bot] (#431)
  • chore(deps): bump release-drafter/release-drafter from 7.2.1 to 7.3.0 @dependabot[bot] (#430)
  • chore(deps-dev): bump @types/node from 25.6.1 to 25.6.2 in the development-dependencies group @dependabot[bot] (#429)

🔄 Code Quality & Refactoring

  • Improve workflow caching correctness, external registry resilience, and CI supply-chain hardening @copilot-swe-agent[bot] (#431)

📝 Documentation

  • Improve workflow caching correctness, external registry resilience, and CI supply-chain hardening @copilot-swe-agent[bot] (#431)

📦 Dependencies

  • chore(deps-dev): bump knip from 6.12.1 to 6.12.2 in the development-dependencies group @dependabot[bot] (#434)
  • chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 @dependabot[bot] (#433)
  • chore(deps): bump fast-uri from 3.1.0 to 3.1.2 @dependabot[bot] (#432)
  • Improve workflow caching correctness, external registry resilience, and CI supply-chain hardening @copilot-swe-agent[bot] (#431)
  • chore(deps): bump release-drafter/release-drafter from 7.2.1 to 7.3.0 @dependabot[bot] (#430)
  • chore(deps-dev): bump @types/node from 25.6.1 to 25.6.2 in the development-dependencies group @dependabot[bot] (#429)

🧪 Test Coverage Improvements

  • Improve workflow caching correctness, external registry resilience, and CI supply-chain hardening @copilot-swe-agent[bot] (#431)

🏛️ European Parliament MCP Server Enhancements

Changes in this release continue to enhance the European Parliament MCP Server's capabilities for providing AI assistants with structured access to parliamentary datasets, including:

  • Model Context Protocol (MCP) tools, resources, and prompts
  • European Parliament API integration and data access
  • Security-first architecture with GDPR compliance
  • High-performance caching and rate limiting
  • Comprehensive TypeScript typing and runtime validation

📊 Quality Metrics & Documentation

Test Coverage
Unit Tests
E2E Tests
API Docs
Documentation Portal

🔐 Security & Compliance

OpenSSF Scorecard
SLSA 3
SBOM
SBOM Quality
Attestations

🛡️ Hack23 ISMS Compliance

Information Security Policy
Open Source Policy
ISO 27001
NIST CSF 2.0
CIS Controls v8.1
GDPR

This release maintains compliance with Hack23 AB's Information Security Management System (ISMS):

  • ✅ ISO 27001:2022 - Information security management
  • ✅ NIST CSF 2.0 - Cybersecurity framework
  • ✅ CIS Controls v8.1 - Security best practices
  • ✅ GDPR - EU data protection compliance
  • ✅ SLSA Level 3 - Supply chain security with build provenance

💻 Technology Stack

  • 🔌 Model Context Protocol - MCP SDK for AI integration
  • ⚡ Node.js 25.x - Latest JavaScript runtime
  • 🔷 TypeScript 6.0.2 - Strict typing with latest standards
  • 🏛️ European Parliament API - Official open data access
  • 🔒 Zod - Runtime schema validation
  • 🌐 Undici - Fast HTTP/1.1 client
  • 💾 LRU Cache - Efficient caching for API responses
  • 🧪 Vitest - Fast unit testing with 80%+ coverage

🏛️ European Parliament Data Access

  • 👥 MEPs - Current and historical member information
  • 📊 Plenary - Sessions, votes, and attendance records
  • 🏛️ Committees - Meetings, documents, and membership
  • 📄 Documents - Legislative texts, reports, amendments
  • ❓ Questions - Parliamentary questions and answers

🔍 Build Attestations & Verification

All artifacts in this release include cryptographic attestations proving build integrity. For npm packages, use npm's provenance tooling; for GitHub artifacts, use GitHub attestations:

# Primary: verify npm package provenance using npm signatures
npm audit signatures european-parliament-mcp-server@1.3.2

# Optional: inspect attached attestations in the npm registry
npm view european-parliament-mcp-server@1.3.2 dist.attestations

# Verify GitHub artifact attestations for this repository
gh attestation verify european-parliament-mcp-server@1.3.2 --owner Hack23 --repo European-Parliament-MCP-Server

# View all GitHub attestations
gh api /repos/Hack23/European-Parliament-MCP-Server/attestations

SLSA Level 3 Benefits:

  • 🔐 Cryptographic proof of build integrity
  • 🛡️ Protection against supply chain attacks
  • 📋 Full build provenance transparency
  • ✅ Independent verification capability

See ATTESTATIONS.md for complete verification guide.

🙏 Contributors

Thanks to @Copilot, @dependabot[bot], @pethers, copilot-swe-agent[bot] and dependabot[bot] for their contributions to this release!

📚 Additional Resources

Full Changelog: v1.3.1...1.3.2

Contributors

pethers and dependabot
Assets 7
Loading