MCPAudit 2.5.0

MCPAudit 2.5.0

Proof Before Action is now published as part of MCPAudit 2.5.0.

Release boundary:

• Tag: v2.5.0
• Package/source commit: 681da6fb287f9baed99fada4ca1eb145994700db
• Publish workflow commit: ec176b4a6b2f2837c89885a48a676a8fd5cfc189
• Publish run: https://github.com/saagpatel/MCPAudit/actions/runs/29723062088

PyPI readback:

• mcp_audits-2.5.0-py3-none-any.whl
  • SHA256: d844e4ebd15ec76c792a69487b982a7582ba3168e793eb9d83d7e451e4e37390
• mcp_audits-2.5.0.tar.gz
  • SHA256: 260cd5f2259551084838158070194c25b1c72df5b057bb445d3d86b5fb638be4

Security posture:

• PyPI publication used a solo-maintainer policy, not independent review.
• The release retained manual dispatch, exact tag/commit binding, named pypi environment approval, administrator bypass disabled, artifact hash verification, and PyPI OIDC trusted publishing with attestations.

Post-publication smoke:

• uvx --no-cache --refresh --from mcp-audits==2.5.0 mcp-audit --version -> mcp-audit, version 2.5.0
• uvx --no-cache --refresh --from mcp-audits==2.5.0 proof-before-action --version -> proof-before-action, version 2.5.0