Skip to content

European Parliament MCP Server v1.3.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 May 18:33
· 251 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.3.6
40efcb5

Highlights

🚀 New MCP Tools

🏛️ European Parliament Features

🏗️ Infrastructure & Performance

  • chore(deps-dev): bump eslint from 10.3.0 to 10.4.0 in the development-dependencies group @dependabot[bot] (#453)
  • chore(deps-dev): bump knip from 6.13.1 to 6.14.0 in the development-dependencies group @dependabot[bot] (#450)
  • chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 @dependabot[bot] (#449)
  • chore(deps): bump step-security/harden-runner from 2.19.2 to 2.19.3 @dependabot[bot] (#448)

🔄 Code Quality & Refactoring

🔒 Security & Compliance

📝 Documentation

📦 Dependencies

  • chore(deps-dev): bump eslint from 10.3.0 to 10.4.0 in the development-dependencies group @dependabot[bot] (#453)
  • chore(deps-dev): bump knip from 6.13.1 to 6.14.0 in the development-dependencies group @dependabot[bot] (#450)
  • chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 @dependabot[bot] (#449)
  • chore(deps): bump step-security/harden-runner from 2.19.2 to 2.19.3 @dependabot[bot] (#448)

🧪 Test Coverage Improvements

⚙️ Component Updates

🏛️ European Parliament MCP Server Enhancements

Changes in this release continue to enhance the European Parliament MCP Server's capabilities for providing AI assistants with structured access to parliamentary datasets, including:

  • Model Context Protocol (MCP) tools, resources, and prompts
  • European Parliament API integration and data access
  • Security-first architecture with GDPR compliance
  • High-performance caching and rate limiting
  • Comprehensive TypeScript typing and runtime validation

📊 Quality Metrics & Documentation

Test Coverage
Unit Tests
E2E Tests
API Docs
Documentation Portal

🔐 Security & Compliance

OpenSSF Scorecard
SLSA 3
SBOM
SBOM Quality
Attestations

🛡️ Hack23 ISMS Compliance

Information Security Policy
Open Source Policy
ISO 27001
NIST CSF 2.0
CIS Controls v8.1
GDPR

This release maintains compliance with Hack23 AB's Information Security Management System (ISMS):

  • ✅ ISO 27001:2022 - Information security management
  • ✅ NIST CSF 2.0 - Cybersecurity framework
  • ✅ CIS Controls v8.1 - Security best practices
  • ✅ GDPR - EU data protection compliance
  • ✅ SLSA Level 3 - Supply chain security with build provenance

💻 Technology Stack

  • 🔌 Model Context Protocol - MCP SDK for AI integration
  • ⚡ Node.js 25.x - Latest JavaScript runtime
  • 🔷 TypeScript 6.0.2 - Strict typing with latest standards
  • 🏛️ European Parliament API - Official open data access
  • 🔒 Zod - Runtime schema validation
  • 🌐 Undici - Fast HTTP/1.1 client
  • 💾 LRU Cache - Efficient caching for API responses
  • 🧪 Vitest - Fast unit testing with 80%+ coverage

🏛️ European Parliament Data Access

  • 👥 MEPs - Current and historical member information
  • 📊 Plenary - Sessions, votes, and attendance records
  • 🏛️ Committees - Meetings, documents, and membership
  • 📄 Documents - Legislative texts, reports, amendments
  • ❓ Questions - Parliamentary questions and answers

🔍 Build Attestations & Verification

All artifacts in this release include cryptographic attestations proving build integrity. For npm packages, use npm's provenance tooling; for GitHub artifacts, use GitHub attestations:

# Primary: verify npm package provenance using npm signatures
npm audit signatures european-parliament-mcp-server@1.3.6

# Optional: inspect attached attestations in the npm registry
npm view european-parliament-mcp-server@1.3.6 dist.attestations

# Verify GitHub artifact attestations for this repository
gh attestation verify european-parliament-mcp-server@1.3.6 --owner Hack23 --repo European-Parliament-MCP-Server

# View all GitHub attestations
gh api /repos/Hack23/European-Parliament-MCP-Server/attestations

SLSA Level 3 Benefits:

  • 🔐 Cryptographic proof of build integrity
  • 🛡️ Protection against supply chain attacks
  • 📋 Full build provenance transparency
  • ✅ Independent verification capability

See ATTESTATIONS.md for complete verification guide.

🙏 Contributors

Thanks to @Copilot, @dependabot[bot], @pethers, copilot-swe-agent[bot] and dependabot[bot] for their contributions to this release!

📚 Additional Resources

Full Changelog: v1.3.5...1.3.6

Contributors

pethers and dependabot
Assets 7
Loading