• v2.23.0 7efed55375

    v2.23.0 Stable

    goern released this 2026-05-25 08:20:27 +00:00 | 695 commits to main since this release

    No known key found for this signature in database
    GPG key ID: 9AFBDCD702A142D8

    Changelog

    • 7efed55375 chore(release): 2.23.0
    • bbbf84ec26 chore: update beads jsonl
    • 92864bd2dc Merge pull request 'docs: add NixOS installation instructions' (#146) from byteflavour/forgejo-mcp:docs-nix-install into main
    • 6e21d26698 Merge pull request 'docs: 📝 retrofit openspec for stateless-http-auth (#137)' (#139) from openspec/stateless-http-auth into main
    • 984e56d018 Merge pull request 'feat: support stateless per-request authentication for HTTP and SSE transports' (#138) from byteflavour/forgejo-mcp:stateless-token into main
    • 51c996ad78 Merge branch 'main' into docs-nix-install
    • 3170b1d769 Merge branch 'main' into stateless-token
    • ebb70b3dbc chore: 🔧 bd: close dhd (PR #147 merged), claim 1l5 RFC
    • ebd76e90af Merge pull request 'ci: gitleaks allowlist for placeholder tokens in demo docs' (#147) from ci/gitleaks-allowlist-demos into main
    • fa2c5fc79e chore: 🔧 bd: file dhd (gitleaks placeholder allowlist), claim, link PR #147
    • ed5f419195 ci: 🔧 gitleaks: allow placeholder tokens in demo docs
    • 612da9f9b7 Merge pull request 'fix: bump x/net + jsonparser to clear govulncheck advisories' (#145) from ci/fix-govulncheck-151 into main
    • 45bdadc2e0 chore: 🔧 bd: claim+close 02o (PR #145 labeled Kind/Security)
    • 9e29a13036 docs: improve NixOS installation instructions
    • bd08d6147d merge: resolve conflicts with upstream/main
    • 4969ee5881 feat: robust stateless auth with security fixes and improved tests
    • d3fcc3d2eb ci: 🔒️ provision cosign signing material for release pipeline
    • e084bf70f7 fix: 🔒️ bump x/net to v0.55.0 + jsonparser to v1.1.2 (govulncheck)
    • b53143f18c docs: 📝 add multi-tenant HTTP mode documentation and demo
    • 7063249513 chore: 🔧 reconcile .gitignore
    • c0416e376d chore: 🔧 bd: close 51l (PR #144 merged)
    • b2c67f8709 Merge pull request 'ci: harden release pipeline (SBOM, smoke-test, conditional cosign signing)' (#144) from ci/step3-release-hardening into main
    • 23be9fdaa5 chore: 🔧 bd: claim 51l, link PR #144
    • 42614b036b ci: 🔒️ add cosign-keygen.sh producing SOPS-encrypted k8s Secret
    • c82fbeef42 ci: 🚀 release.yml: syft + cosign install, smoke-test, conditional sign
    • 74f601a4eb ci: 🚀 enable checksums and per-archive CycloneDX SBOMs in goreleaser
    • 2ff1ddd2de chore: 🔧 bd: close 9n2, file e9i (ci.yml run #147 failure)
    • 815a2d0426 ci: 🚀 add Forgejo Actions CI workflow with Go cache
    • eed502bab4 chore: 🔧 bd: claim forgejo-mcp-9n2, link PR #143
    • 738d979553 ci: 🚀 add vet, gofmt-check, mod-tidy, lint, race, govulncheck to go-ci
    • 98b3cd572a fix: 🔒️ bump golang.org/x/crypto to v0.52.0 (GO-2026-5018)
    • 34effc817f style: 🎨 apply gofmt -w to operation/* and pkg/*
    • f305e33fc2 chore: 🔧 bd: file + close forgejo-mcp-5x8 (PaC webhook fix)
    • 1e03bb342a Merge pull request 'chore(deps): update registry.access.redhat.com/hi/go docker tag to v1.26.3' (#141) from renovate/registry.access.redhat.com-hi-go-1.x into main
    • f4cacf1bd1 chore: 🔧 bd: file CI hardening epic (Steps 1–3 + follow-ups)
    • a623431f3c chore(deps): update registry.access.redhat.com/hi/go docker tag to v1.26.3
    • 4f57c57fbe Merge pull request 'chore: 🔧 switch Containerfile to Project Hummingbird base images' (#140) from worktree-containerfile-hummingbird into main
    • 3d8ade1dd6 chore: 🔧 switch Containerfile to Project Hummingbird base images
    • df15877777 docs: 📝 retrofit openspec for stateless-http-auth (#137, PR #138)
    • 3a73026b16 chore: 🔧 add Claude Code agent team infrastructure for multi-agent workflows
    • 684844cbe6 feat: stateless per-request token handling for HTTP/SSE transports
    • b6eb0a9977 chore: 🔧 bd: file C5 spike + C4 cleanup issues, link to forgejo-mcp-673
    • 48809bd3a5 docs: 📝 battle-test forgejo-action-code-review, resolve C4 spike
    • 1dc7a17fb2 docs: 📝 archive add-releases-support, sync release-management spec
    • 4554d59286 Merge pull request 'feat: add 14 MCP tools for Forgejo releases and release attachments' (#134) from feat/releases-support into main
    • a41115b9bb feat: add 14 MCP tools for Forgejo releases and release attachments
    • 7eb8a34234 docs: 📝 archive 5 delivered openspec changes, track 2 unimplemented
    • 097516ade8 docs: 📝 add Radicle mirror clone instructions to README
    • 2b5721aaa1 ci: 🚀 drop redundant PaC annotations on openspec-validate
    • b936f8ab20 ci: 🚀 add gitleaks scanning (Tekton + pre-commit)
    • e55c259ae5 docs: 📝 link demos/ index from top-level README
    • 621e6648d0 docs: 📝 add demos/README.md index grouping demos by topic cluster
    • 4baeb3030e docs: 📝 add showboat demos for v2.22.0 (org labels, bounded responses)
    Downloads