v2.2.0

Added

• react adds or removes your emoji reaction on an issue, a merge request or a comment on one, and says when you already reacted, or had no such reaction; an add is never repeated after a lost answer.
• get_issue and get_merge_request show the item's thumbsup and thumbsdown counts.
• list_mr_versions lists a merge request's diff versions, newest first, and compare_mr_versions shows the commits and diffs between two of them, or since one, as GitLab's version comparison does; after a rebase the diff includes what the target branch gained, and the result says when the merge base moved.
• get_merge_request shows each reviewer's review state, such as reviewed or requested_changes: the first 100, and says when GitLab has more.
• apply_suggestions (Ship) commits suggestions from a merge request's diff comments to its source branch in one commit, refuses a default or protected source branch and text with hidden, bidirectional or other invisible characters (Hangul fillers and variation selectors included), asks you with each suggestion's text, is never repeated after a lost answer, and reads back the branch's new head; list_discussions names each diff comment's suggestions with their ids and exact text.
• cancel_auto_merge (Ship) stops a merge request merging when its pipeline succeeds, sends nothing when no auto-merge is set, says when GitLab was already merging it or merged it, and reads whether it canceled from GitLab's answer body, since the status is 201 either way.
• update_review_comment replaces the text of one of your own draft review comments, keeping its thread and its line, with the note_sha256 witness that list_review_comments and add_review_comment now give.
• publish_review_comment publishes one of your own drafts on its own and reports the comment it became, read from the threads afterwards, or says the draft was lost when GitLab deleted it without saving a comment; it is never repeated after a lost answer.

Changed

• Commit lists (list_commits, list_mr_commits, compare_refs), get_commit and get_blame show git author and committer names inside the untrusted-content markers, as titles and messages are, and a straight compare_refs is named from..to.

Fixed

• add_review_comment refuses a second draft reply in a thread as [conflict], naming your draft there, since GitLab keeps one per person per thread; it was [invalid] with GitLab's validation message.
• submit_review refuses a review whose drafts hold a quick-action line, which GitLab would run on publishing; a draft written in GitLab's web view could hold one.

---

Built by GoReleaser from the tag. Each archive carries the binary,
LICENSE, NOTICE and README, with an SBOM beside it.

Verify a download before you run it:

sha256sum -c checksums.txt --ignore-missing
cosign verify-blob checksums.txt --bundle checksums.txt.bundle \
  --certificate-identity 'https://github.com/mmedum/gitlab-mcp/.github/workflows/release.yml@refs/tags/v2.2.0' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
gh attestation verify gitlab-mcp_2.2.0_linux_amd64.tar.gz --repo mmedum/gitlab-mcp
gh attestation verify gitlab-mcp_2.2.0.mcpb --repo mmedum/gitlab-mcp

gitlab-mcp_2.2.0.mcpb is the Claude Desktop bundle. Its
SHA-256 is in the same signed checksums.txt. It does not log
you in: install the binary as well and run
gitlab-mcp login --client-id <application id> once from a terminal.