passmcp-lsp 0.0.8

Highlights ⭐️

• In lockstep with passmcp 0.0.8: passmcp-reporting is required at v0.0.8, whose attestation verifiers are unchanged from v0.0.7, and the policy rules and hover are cross-checked against passmcp v0.0.8. The language server's own code and its diagnostics are unchanged.
• Issue templates, and no more pointers to Discussions: bug report and feature request forms are added, with a chooser that sends vulnerabilities to private reporting and check verdicts to passmcp. SUPPORT.md no longer sends questions to GitHub Discussions, which are not enabled; a question is a GitHub issue.
• Release workflow on goreleaser/goreleaser-action 7.3.0, pinned by commit.

What's Changed

• chore(release): passmcp-lsp 0.0.8 by @sebastienrousseau in #13
• chore(release): passmcp-lsp 0.0.8 by @sebastienrousseau in #14

Checksums

SHA-256 of every asset attached to this release:

a603854aef6a8beeec963fed91d8b7073b66c1e1b852bc969dc3f6fb61bf8bc5  checksums.txt
c856348e6b65e2362dd6f4827695f3a8069fe17402bdec21a76e8220f9a78ab7  checksums.txt.intoto.jsonl
5496f500485bb165048e9de4197ead7c2245031da79e8bba0f47b66d843e82de  checksums.txt.sigstore.json
fda2411698b12afbd3177eba10f3ba0265d5d65d0bd2ba8603b537c682a961c3  passmcp-lsp-0.0.8.vsix
1d8a778c15fbb5696d9b8981c5b59bfb493c6c97fad946c74b04c3b14c4e38cc  passmcp-lsp_Darwin_arm64.tar.gz
82fee4fa7f8ae321e10faa671bb7d93bb106e0f4f42edc0f575a73d76acce08e  passmcp-lsp_Darwin_x86_64.tar.gz
4fc11866ba4e419bf77ad41db588dabd0ad729e56aa4c10e14cd6c8b8af9ded2  passmcp-lsp_Linux_arm64.tar.gz
747c3da9e1c29755cf7e73d6180811688948e2907b3249004647400af129396a  passmcp-lsp_Linux_x86_64.tar.gz
c0646dbc5a383452fe5362dbfa39d2ae23d2d1f461879165ad92c423b16d6d0e  passmcp-lsp_Windows_arm64.zip
1839aa51b3f0562cbfdc82e53371aa55a6dee35ab031ad683835708faef3a0c4  passmcp-lsp_Windows_x86_64.zip

Full Changelog: v0.0.7...v0.0.8

passmcp-lsp 0.0.7

Highlights ⭐️

• Joins the family at 0.0.7: passmcp-lsp did not ship a 0.0.6, so it moves from 0.0.5 straight to the family's version. The language server's own code is unchanged.
• VS Code extension dependencies: @types/node moves to 26.6.5, and @types/vscode stays at 1.91, the oldest VS Code the extension supports. The 0.0.5 highlights said it had moved to 1.140.0; it had not.
• Built with Go 1.26.9: the release binaries no longer ship Go 1.26.8's standard library, which carries GO-2026-6599 to GO-2026-6617; none was reachable from this code.
• In lockstep with passmcp 0.0.7: passmcp-reporting is required at v0.0.7, and the policy rules and hover are cross-checked against passmcp v0.0.7.

What's Changed

• chore(release): passmcp-lsp 0.0.7 by @sebastienrousseau in #11

Checksums

SHA-256 of every asset attached to this release:

38a096b4de7b489dc3d567e489da313d2cbfd163d4ce3b9a12c0d1a40d82ae34  checksums.txt
05f658847bc70139104bed27fba2fa9916b5b4cd541aad9022a3e532dac58e28  checksums.txt.intoto.jsonl
9c96cc5526b35323764cc9980e9bf52b66de70e3f2d3f1e935146de6e367e14a  checksums.txt.sigstore.json
2993b8d914d582d05fc1305e0579dde10541d24d8e35f23f0c9590afda0c8536  passmcp-lsp-0.0.7.vsix
87353c8f4ecd6b56b178d1f31f2251c485968bbdf1b72f7bd39ed71babcb05c5  passmcp-lsp_Darwin_arm64.tar.gz
876db3c31c7a3dbf90b92791477e73d4d5c56a7af2b780afa7a2f5e5c9a67d3d  passmcp-lsp_Darwin_x86_64.tar.gz
6732b5cca2a7dde914f77afa4f0e8ea258159913099273b6d43ce71fd6c49127  passmcp-lsp_Linux_arm64.tar.gz
b948485659111ee9fe2c1f60705af5be2e0a9c3d244b486c8d8199369bbc526b  passmcp-lsp_Linux_x86_64.tar.gz
600c6ca3eed7a9aef645a0fb1cfaadad2aa85f8116ca956a1520319684af0deb  passmcp-lsp_Windows_arm64.zip
50764f0f3ccda7d9e399b4537be0dd21b6f2e2b6bcf2177f4d2ecc67b1990ea7  passmcp-lsp_Windows_x86_64.zip

Full Changelog: v0.0.5...v0.0.7

passmcp-lsp 0.0.5

This PR advances passmcp-lsp to v0.0.5 with updated VS Code extension dependencies and reporting lockstep alignment.

It refreshes developer types for the editor plugin and aligns dependencies with passmcp-reporting v0.0.5.

Highlights ⭐️

• VS Code Extension Dependencies: updates @types/node to 26.6.4 and @types/vscode to 1.91.0 aligned with engines.vscode.
• In lockstep with passmcp 0.0.5: updates passmcp-reporting to v0.0.5 and the extension manifest to 0.0.5.
• CI Hardening: configures stable Go toolchain for the vulnerability scan job.

What's Changed

• chore(deps): Bump satellion.com/passmcp-reporting from 0.0.4 to 0.0.5 by @dependabot in #6
• chore(deps): Bump the vscode-extension group in /editors/vscode by @dependabot in #7
• chore(release): Release passmcp-lsp 0.0.5 by @sebastienrousseau

Validation

• make all: format, vet, lint (0 issues), spdx-check, test with statement coverage >= 95.7%, smoke test clean.
• scripts/verify-release-versions.sh v0.0.5: release versions agree on 0.0.5 across README.md, docs, CITATION.cff, and extension package.json / package-lock.json.
• make vscode: package-lock npm ci, node --test 100% coverage, and vsce package successful.
• go test ./...: all packages passed, 0 failures.

Checksums

639bd6440d312f86d2ff8302efed5cb1b26f9fccffa5b9b19941c2dfc4092ad4  passmcp-lsp-0.0.5.tar.gz

Full Changelog: v0.0.4...v0.0.5

passmcp-lsp 0.0.4

Highlights ⭐️

• A README demo: , rendered from .github/demo.tape by make demo: the check command flagging a misspelled key in a passmcp policy, then passing once it is fixed.
• In lockstep with passmcp 0.0.4: Passmcp-lsp requires passmcp-reporting v0.0.4, whose attestation API is unchanged, and its policy rules and hover are cross-checked against passmcp v0.0.4.
• The README's install section: It said go install waits on satellion.com serving the module's import path. The site has served it since its 0.0.3 deploy, and go install satellion.com/passmcp-lsp/cmd/passmcp-lsp@v0.0.3 works.

What's Changed

• chore(release): passmcp-lsp 0.0.4 by @sebastienrousseau in #5

Checksums

SHA-256 of every asset attached to this release:

2c24605bf723fbcb87f54200a1946143ce684edd97e48e842de903aea497c431  checksums.txt
18d2aa8fb6bd70b2ee9403715c4d6abdbf43a4e20d9f72374e1b14ac1a320f5a  checksums.txt.intoto.jsonl
222f5072047ffcd77cd47b4fe130ffd01f7b8688f25815922de71df1ada825f2  checksums.txt.sigstore.json
0588e607ffd87541bebb87f139b7fd1f8d1b8361440ca0ae587d921684260a4b  passmcp-lsp-0.0.4.vsix
f5a9b60d9752bddeefb1274583174a3b5dbe324946a38dff0ac0c000a01958ae  passmcp-lsp_Darwin_arm64.tar.gz
2db4aa6e39d6402c327f9cc451ddef381355f2b05b9dd80e431a411e14525235  passmcp-lsp_Darwin_x86_64.tar.gz
ded95635560318ef96f5520183ea96731ba905f4cdbaccb40bf4107c4afbac69  passmcp-lsp_Linux_arm64.tar.gz
6e0b4be5fc0f8ea7581da2a40da61a10b19cfd63894a4a5742c22012a60fcbf6  passmcp-lsp_Linux_x86_64.tar.gz
207212074b6359435668528dc798ef956e3f680fdb55185a92ee1bd337a52df6  passmcp-lsp_Windows_arm64.zip
89720facc60b7735015a5097c79370c9cd1ab6958f87ba4fe85e942133685f04  passmcp-lsp_Windows_x86_64.zip

Full Changelog: v0.0.3...v0.0.4

passmcp-lsp 0.0.3

Highlights ⭐️

• Same server, the family's new version: the language server is unchanged from 0.0.2. passmcp-lsp moves to 0.0.3 with passmcp, whose family manifest now lists it as released.
• An accurate README: capabilities are marked released in 0.0.2 with a link to the release, and the README says plainly that go install waits on satellion.com serving the module's import path.
• The VS Code extension builds with TypeScript 7.0: it still targets VS Code 1.91 and later, so it installs in the same editors as before.

What's Changed

• chore(release): passmcp-lsp 0.0.3 by @sebastienrousseau in #4

Checksums

SHA-256 of every asset attached to this release:

6e48c84cf3b1d3718a3103a84c9f44d1f49ac057dc97675c4d339a9b144fea2f  checksums.txt
83cbf7af1690f28ecea61a3a9a830dbcc4d47274c28e19bd7fa235364174aa53  checksums.txt.intoto.jsonl
0ebba4dd5a85f961fd9356160382d8788ed6ea84fd955110cad1566c98096043  checksums.txt.sigstore.json
87e97024ed3e85b53cf24b79131934b6506f53d95f9e7c7a5fb19ae621e495bb  passmcp-lsp-0.0.3.vsix
d53bfe64efba63a2789b56295df839e21ba908a1125d30200d7db7546e0e134f  passmcp-lsp_Darwin_arm64.tar.gz
fd83c4638c7986cbff1eb14cfd4721f1a860072e140251504285be03e1981b6f  passmcp-lsp_Darwin_x86_64.tar.gz
c9b4d9c8ceed1db90d26cb281e77578e6bb757b9dfc44d78c4c12be985d07322  passmcp-lsp_Linux_arm64.tar.gz
619ea7905bd053d39c7c5e3a7c434e87f0e4978db5f80b0304619515cde3c863  passmcp-lsp_Linux_x86_64.tar.gz
b30d32c02666b18aa1303674f04105bc0b1a1eba3602dfb3f6d8e8ae37effdc9  passmcp-lsp_Windows_arm64.zip
22fc308e640276eac578c2db69d66585c72190e76f19c4f654f5c3abccb8e89f  passmcp-lsp_Windows_x86_64.zip

Full Changelog: v0.0.2...v0.0.3

passmcp-lsp 0.0.2

Highlights ⭐️

• Catch mistakes in MCP files while you type: passmcp-lsp checks server.json against the MCP Registry's schema, and flags broken or risky entries in Claude Desktop, Claude Code, Cursor and VS Code client configurations, including credentials written into them.
• Policies and attestations as passmcp reads them: a policy passmcp would refuse is an error in the editor, with passmcp's reason, and an attestation is verified offline by passmcp-reporting.
• passmcp's guidance on hover: hover a check id in a policy or an attestation to see what the check means and how to fix it, from the passmcp you have installed.
• In the editor or in CI: a VS Code extension, a Neovim configuration, and passmcp-lsp check for a pipeline.

What's Changed

• feat: add passmcp-lsp, first shipping at 0.0.2 by @sebastienrousseau in f972e14
• chore: start the repository by @sebastienrousseau in aa9beef
• test: accept any OS wording for a missing file by @sebastienrousseau in d6a2d63
• build: require passmcp-reporting v0.0.2 by @sebastienrousseau in 3fa4ad2

Checksums

SHA-256 of every asset attached to this release:

a2843f746b4687a579cfba8eef1112536200ad7a0f9a5e4c676b48d0b39dbd85  checksums.txt
3f5038517f6dc6f33784ac5a3f9f7f7c921f75d5ed9a7fe7c8602afa88198f1c  checksums.txt.intoto.jsonl
3f451bcd52bac49133a0898fd1a91b0a9e467bfa1762dda15b13350b4cf68ee3  checksums.txt.sigstore.json
435ad191fae0c6dcedb28e8a4d682188040d3a24e3fd5c99dfc6d45558462da1  passmcp-lsp-0.0.2.vsix
d7e1e57d6704f1938f3ae223998396357069b41aabaf8808cecb648a01c1cf11  passmcp-lsp_Darwin_arm64.tar.gz
1233ad6ba3bdc75beba1b88f609a1b24808157e30d73d49aada110174588b3d2  passmcp-lsp_Darwin_x86_64.tar.gz
a79d6a8f059b7e17cece466fe474dc067848f9d2bf73add3f5fc882862207d0f  passmcp-lsp_Linux_arm64.tar.gz
35a3bd5808c60ffc427e64d44bad8862d9327c29b9afd865adac339bd0ff046d  passmcp-lsp_Linux_x86_64.tar.gz
5679636721acfd8432f5c2161d9625878b79d5fac986c5a9aa47f0c20f6c141d  passmcp-lsp_Windows_arm64.zip
80b49cfd83517f20c6ad0bb70531c9ce74c2001e183bbfb5cbddac9c02d3b6ad  passmcp-lsp_Windows_x86_64.zip

Full Changelog: https://github.com/sebastienrousseau/passmcp-lsp/commits/v0.0.2