1.5.0

What's Changed

• fix(ci): try a better workaround for ETXTBUSY by @owtaylor in #384
• ci: use upstream pull refs for Testing Farm requests by @alexxa in #390
• docs: reorganize and simplify documentation by @owtaylor in #388
• ci: add GitHub-GitLab PR mirroring integration by @owtaylor in #385
• chore(deps): update actions/github-script action to v8 by @renovate[bot] in #391
• ci: Add tag to the mirroring ci pipeline by @Jazzcort in #397
• ci: rewrite GitHub PR mirror script in Python by @owtaylor in #398
• chore(deps): update dependency pytest to v9.0.3 [security] by @renovate[bot] in #395
• fix(ci): remove stray repository by @Jazzcort in #400
• chore: update vite and vitejs/plugin-react by @Jazzcort in #392
• fix(ci): build mcp-app in doc generation action by @owtaylor in #393
• fix: set temperature to zero for gatekeeper models by @Jazzcort in #401
• fix(run_script): set readOnlyHint for validate_script by @owtaylor in #402
• Add tests to cover run_script.py by @subpop in #356
• fix(ssh): add timeout to local command execution by @xingyug in #339
• docs: auto-generate tool documentation from MCP server metadata by @owtaylor in #394
• ci: use system default python for TMT plans by @alexxa in #396
• Mitigate prompt injection by @JoseExposito in #416
• test(functional): ignore timestamps in service status assertions by @alexxa in #407
• eval: Add id for test cases and remove ineffective test cases by @Jazzcort in #403
• run_script: Handle script changes in run_script_with_confirmation() by @JoseExposito in #417
• test: add middleware coverage tests by @panyamkeerthana in #380
• chore(deps): update actions/upload-artifact action to v7.0.1 by @renovate[bot] in #418
• chore(deps): update actions/upload-pages-artifact action to v5 by @renovate[bot] in #406
• chore(deps): update actions/github-script action to v9 by @renovate[bot] in #413
• chore(deps): update softprops/action-gh-release action to v3 by @renovate[bot] in #420
• chore(deps): update pypa/gh-action-pypi-publish action to v1.14.0 by @renovate[bot] in #399
• Call the generate_tool_docs script during doc workflow by @subpop in #422
• Move annotations parameter to @mcp.tool decorator by @subpop in #423
• chore(deps): update dependency mkdocstrings to v1.0.4 by @renovate[bot] in #428
• chore(deps): update dependency postcss to v8.5.10 by @renovate[bot] in #429
• chore(deps): update dependency google-cloud-aiplatform to v1.148.0 by @renovate[bot] in #427
• chore(deps): update dependency autoprefixer to v10.5.0 by @renovate[bot] in #424
• fix(ssh): replace private _username with public get_extra_info API by @xingyug in #408
• chore(deps): update astral-sh/setup-uv action to v8.1.0 by @renovate[bot] in #432
• fix(scripts): extend timeout in verify_installation.sh by @Jazzcort in #441
• chore(deps): update dependency pydantic to v2.13.3 by @renovate[bot] in #421
• chore: update vite-plugin-singlefile and migrate to rolldown by @Jazzcort in #439
• chore(deps): update actions/setup-node action to v6.4.0 by @renovate[bot] in #436
• fix mcp-apps(ui): correct horizontal overflow in code blocks by @Jazzcort in #438
• chore(deps): update dependency pydantic-settings to v2.14.0 by @renovate[bot] in #437
• chore(deps): update dependency vite to v8.0.9 by @renovate[bot] in #435
• run_script: Avoid requesting sudo password by @JoseExposito in #415
• feat: add JSON output, output-all flag, and ID tracking to gatekeeper eval by @Jazzcort in #405
• eval: add Gatekeeper benchmark visualization interface by @Jazzcort in #412
• ci: use GitHub API for functional test authorization by @alexxa in #409
• feat(ci): add evaluation workflow for gatekeeper models by @Jazzcort in #426
• feat: add authentication and authorization support by @panyamkeerthana in #355
• chore(deps): update dependency @modelcontextprotocol/ext-apps to v1.7.1 by @renovate[bot] in #425
• fix(ci): replace negation operator with null/empty checks in GitLab CI rules by @Jazzcort in #455
• fix(eval): handle exceptions in gatekeeper benchmark by @Jazzcort in #451
• chore(deps): update dependency google-cloud-aiplatform to v1.149.0 by @renovate[bot] in #446
• Mitigate tool call error due to missing "detail" field in the gatekeeper response by @Jazzcort in #448
• deps: Port to FastMCP 3.2 by @owtaylor in #452
• chore(deps): update dependency pydantic to v2.13.4 by @renovate[bot] in #459
• chore(deps): update dependency google-cloud-aiplatform to v1.151.0 by @renovate[bot] in #458
• chore(deps): update dependency pydantic-settings to v2.14.1 by @renovate[bot] in #466
• chore(deps): update dependency asyncssh to v2.23.0 by @renovate[bot] in #467
• Update mcp-app node-js stack by @owtaylor in #468
• chore(deps): update dependency @types/node to v24.12.4 by @renovate[bot] in #469
• feat: redo tool filtering for better tests by @owtaylor in #457
• fix(gatekeeper): Tweak prompt to be more explicit by @owtaylor in #463
• fix(gatekeeper): suppress litellm debugging message by @owtaylor in #464
• fix(gatekeeper): pass a looser schema to the model by @owtaylor in #462
• ci(eval): migrate gatekeeper eval jobs to Vertex AI and update model … by @Jazzcort in #450
• test(functional): Add '--skip-summary' to the testing-farm command line by @owtaylor in #470
• Skip functional test workflow for non-trigger issue comments by @owtaylor in #471
• refactor: improve execution tool guidance for script execution by @Jazzcort in #431
• feat(config): Make the gatekeeper model more configurable by @owtaylor in #465
• docs: Fix build for FastMCP 3 by @owtaylor in #473
• Use commit status to improve github/gitlab integration by @owtaylor in #475
• chore: group npm dependency updates into a single weekly PR by @owtaylor in #485
• chore(deps): update codecov/codecov-action action to v6.0.1 by @renovate[bot] in #480
• Handle internal CA certificates for private GitLab servers by @owtaylor in #488
• chore: Update mcp-app/package-lock.json by @owtaylor in #487
• refactor(gatekeeper): async eval runner with structured classes and stats tracking by @owtaylor in #479
• chore(deps): enforce 7-day minimum package age for npm and uv by @Jazzcort in #481
• feat(eval): add weighted per-status-group scoring system by @owtaylor in #489
• [RSPEED-3010]feat: add ExecutionContext for authorization by @panyamkeerthana in #486
• feat(eval): add standard-evals.sh, replace run-eval-models-corp.sh by @owtaylor in #490
• chore(renovate): use shared org config preset by @major in #495
• feat(eval): overhaul HTML viewer with leaderboard and stats by @owtaylor in #491
• Update codecov/codecov-action 7.0.0 to fix failing CI by @owtaylor in #503
• Improve Renovate configuration by @owtaylor in #502
• docs: document authorization and running as a shared server by @owtaylor in #504
• chore(config): migrate Renovate config by @renovate[bot] in #506
• chore(deps): update other non-major updates by @renovate[bot] in #509
• chore(deps): update dependency vite to v8.0.16 [security] by @renovate[bot] in #505
• chore(deps): update mcp-app npm updates by @renovate[bot] in #507
• chore(deps): update non-major python updates by @renovate[bot] in #508
• chore(deps): pin dependencies by @renovate[bot] in #496
• Improve documentation for running in a container by @owtaylor in #501
• chore(deps): lock file maintenance mcp-app npm updates by @renovate[bot] in #510
• Correctly serialize null values by @STiFLeR7 in #492
• Remove coverity tasks by @samdoran in #518
• chore(deps): update actions/checkout action to v7 by @renovate[bot] in #520
• chore(deps): update dependency pydantic-settings to v2.14.2 [security] by @renovate[bot] in #519
• chore(deps): update other non-major updates by @renovate[bot] in #512
• Sync exec timeout with mcp app by @Jazzcort in #521
• chore(deps): lock file maintenance by @renovate[bot] in #516
• chore(deps): update non-major python updates by @renovate[bot] in #515
• chore(deps): lock file maintenance by @renovate[bot] in #499
• auth_policy: add tool exclusion support to policy rules by @owtaylor in #523
• chore(deps): update mcp-app npm updates by @renovate[bot] in #513

New Contributors

• @STiFLeR7 made their first contribution in #492

Full Changelog: 1.4.1...1.5.0