v2.5.0

Highlights

🖥️ Claude Desktop one-click extension (.mcpb) — #224

The server now ships as a native Desktop Extension for Claude Desktop: download gitlab-mcp-server.mcpb below, open it with Claude Desktop, fill in the settings, done. No Docker, Node.js, or Python required.

• Single bundle for macOS (universal arm64 + x86_64) and Windows (amd64) — the macOS binary is a new fat binary built via GoReleaser universal_binaries, also published standalone as gitlab-mcp-server-darwin-all
• Settings UI for URL, token (stored in the OS keychain by Claude Desktop), tool surface, tier, read-only, safe mode, and TLS skip — defaults to the low-token dynamic surface
• Auto-update disabled inside the bundle: updates arrive as new extension versions
• New PRIVACY.md (no telemetry — data flows only between your machine and your GitLab instance), new guide, and make mcpb / make check-mcpb targets
• The release pipeline builds, stamps, and uploads the bundle automatically from now on

🩹 GitLab 19 self-recovery hints + client-go v2.46.0 — #218

Every API drift verified live against GitLab 19.0.1 during the e2e gap closure now carries an actionable hint (ADR-0007), so an LLM hitting the error can fix its own call:

• deployment_create: 400 "tag is missing" → retry with tag:false/tag:true; invalid status → accepted statuses (GitLab 19 rejects created)
• create_fork_relation: GitLab 19 returns the project body → success-path hint pointing to forked_from_project
• Terraform state lock (client-go sends no lock-info body) → hint pointing to the terraform CLI backend
• Hook URL variables: 422 → keys accept only letters/underscores
• Usage-data non-SQL metrics 404, CI catalog drafts, legacy epic label events — all with working alternatives

Plus client-go v2.46.0: adopts reviewer_assignment_strategy (disabled|code_owners|dap_powered) in project create/update/output with doc-grounded tier:"premium" gating. 15 new/extended tests.

🤖 Agent-installability — #222

New root-level llms-install.md: a deterministic install guide for AI agents (Cline, Claude, Cursor, …) covering Docker and native-binary paths, env var reference, smoke test, and troubleshooting. Groundwork for the Cline Marketplace listing.

📚 Docs & site

• README: Go Reference and Go Report Card badges restored, Claude Desktop install row, and a Privacy Policy section — #223, #224
• Site: removed references to deleted Wikidata items and refreshed the Person sameAs graph — #220, #221

🧹 Internals

• toolutil: use the unmarshal error directly in condition (Sonar S8193) — #219

---

Changelog

✨ Features

• c2526c8: feat: Claude Desktop extension (.mcpb) build and release pipeline (#224) (@jmrplens)
• 0c6991f: feat: GitLab 19 self-recovery hints + client-go v2.46.0 (reviewer_assignment_strategy) (#218) (@jmrplens)

🐛 Bug Fixes

• cfea31f: fix(mcpb): point manifest author.url at the GitHub profile (#226) (@jmrplens)

📚 Documentation

• e9ab877: docs(readme): restore Go Reference and Go Report Card badges (#223) (@jmrplens)
• 5b4bd73: docs(site): add personal Wikidata item to Person sameAs and footer (#220) (@jmrplens)
• 2ddbb22: docs(site): remove references to deleted Wikidata items (#221) (@jmrplens)
• a8a01fe: docs: add llms-install.md for AI-agent one-click installs (Cline) (#222) (@jmrplens)

🚧 Maintenance

• 344c8ea: chore: update manifests for v2.4.1 (@jmrplens)
• 9481401: chore: version bump to 2.5.0 (#225) (@jmrplens)
• e581ed3: refactor(toolutil): use unmarshal error directly in condition (Sonar S8193) (#219) (@jmrplens)