v2.3.6

Changes in v2.3.6

🐛 Bug Fixes

• fix(config): do not echo credential fragments of invalid GITLAB_API_URL entries #889
• fix(startup): log only host names of configured GitLab API URLs #891

♻️ Refactor

• refactor(server): move MCP prompt catalog out of index.ts #881

📝 Documentation

• docs(comparison): compare with the official GitLab MCP server #882
• docs: note %2C for a comma in a GITLAB_API_URL password #885
• docs(changelog): move v2.3.5 entries out of Unreleased #886

🔬 CI/Test

• test: add golden tools/list fixture to guard refactors #883

🔨 Chore

• chore(deps): bump the npm_and_yarn group across 2 directories with 1 update #887

⚠️ Upgrade notes

• Every GITLAB_API_URL / --api-url entry must now start with http:// or https://. Startup (and auth) fails for any other value, such as localhost:8080, and the error names the entry only by its position, without printing it.
• A comma inside a password in GITLAB_API_URL must be written as %2C. A literal comma is read as a list separator.
• The startup lines Configured GitLab API URLs and Default GitLab API URL now show host names only.

Contributors

• @zereight (7 PRs: #881, #882, #883, #885, #886, #889, #891)
• @dependabot[bot] (1 PR: #887)

⚠️ Deprecation notice

Deprecated configuration options (e.g. GITLAB_READ_ONLY_MODE, USE_GITLAB_WIKI, and other legacy flags) still work during the grace period, but they will be removed in v3.0.0. Please migrate to the replacements described in the pinned issue #815.