Skip to content

v3.0.1 - CI/CD & Annotation Hardening

Choose a tag to compare

View all tags
@neverinfamous neverinfamous released this 30 May 12:10
· 7 commits to main since this release
v3.0.1
53701ad
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v3.0.1 — CI/CD & Annotation Hardening

Highlights

  • Fixed CodeQL severity validation to correctly block deployments on high/critical findings
  • Rewrote test-tool-annotations.mjs into a comprehensive 5-field annotation validation suite
  • Fixed missing tests inclusion in CI typecheck step

Changed

  • Dependency Updates: Updated npm dependencies (e.g. eslint to 10.4.1).
  • Rewrote test-server/scripts/test-tool-annotations.mjs from a basic openWorldHint counter into a comprehensive annotation validation suite. Now validates all 5 annotation fields (openWorldHint, readOnlyHint, destructiveHint, sensitiveHint, idempotentHint), checks logical consistency (e.g., no readOnly+destructive contradiction), enforces an exact allowlist for openWorldHint=true tools, and validates title presence.

Fixed

  • Fixed sqlite_pragma_settings annotation: removed incorrect openWorldHint: true override. PRAGMA operations are internal to the SQLite engine and don't interact with the filesystem or network.
  • Fixed a bug in .github/workflows/codeql.yml where CodeQL severity validation failed to block deployments. The SARIF parser now correctly inherits defaultConfiguration.level when the finding level is omitted, and explicitly excludes the tests/ directory from blocking production releases.
  • Fixed tsconfig.test.json to properly include the tests/ directory and added npm run typecheck:tests to the main check script so CI catches test-related type errors.
  • Fixed "Invocation of non-function" CodeQL alerts in utilities.bench.ts and transport-auth.bench.ts by removing dead benchmark code referencing non-existent functions.

Full Changelog: v3.0.0...v3.0.1

Installation

npm install db-mcp@3.0.1
docker pull writenotenow/db-mcp:v3.0.1
Assets 2
Loading