This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+2 more
Summary
AI summaryExpanded MCP tool suite adds navigation, diagnostics, insights, refactor helpers, testing commands, workspace actions, prompt catalog, CI enforcement, and Go 1.25 requirement.
Full changelog
v2.0.0 – 2025-11-22
Added
- Expanded MCP tool suite – the server now registers navigation (
go_to_definition,find_references), diagnostics (check_diagnostics), insights (get_hover_info,get_completion), refactor helpers (format_document,rename_symbol,list_code_actions), testing (run_go_test,analyze_coverage), workspace commands (search_workspace_symbols,run_go_mod_tidy,run_govulncheck,module_graph), and notification plumbing, all backed by new end-to-end tests underpkg/tools. - Prompt catalog –
summarize_diagnosticsandrefactor_planprompts expose curated messaging for Cursor/Claude via the MCP prompt API. - CI + tooling enforcement –
make verifynow runs gofmt/goimports checks, golangci-lint, go vet, go test, andgo mod tidyvalidation, and.github/workflows/ci.ymlruns the suite on every push/PR.scripts/tidy-check.shensures dependency files stay clean. - Documentation overhaul – Quick Start instructions, tool invocation table, prompt usage guide, and troubleshooting tips were added to
README.mdanddocs/usage.mdfor Cursor, Claude, Copilot, and MCP Inspector integrations.
Changed
- CLI entrypoint –
cmd/mcp-goplsvalidates workspace paths, log settings, RPC/shutdown timeouts, and customgoplsbinaries before startup, handles SIGINT/SIGTERM, and reports shutdown status. - Go requirements – bumped to Go 1.25 with
github.com/mark3labs/mcp-go v0.43.0plus the new JSON/protocol dependencies used by the extended LSP surface. - Progress notifications – long-running tools stream logs with namespaced tokens, eliminating “unknown token” errors in Cursor and surfacing clearer status updates.
- Govulncheck automation –
run_govulncheckautomatically falls back togo run golang.org/x/vuln/cmd/govulncheck@latestwhen the binary is missing, with explicit progress messaging.
Fixed
- Coverage fallback –
analyze_coveragealways returns aggregate results even when per-function parsing fails, so release artifacts never miss coverage numbers. - Transport robustness – the JSON-RPC transport reads exactly one message per call and closes cleanly on pipe errors; the gopls client now discovers
GOROOTviago envto avoid stale runtime paths.
Breaking Changes
- Minimum Go version raised to 1.25
- CLI entrypoint now validates workspace paths, log settings, RPC/shutdown timeouts, and custom `gopls` binaries before startup
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About hloiseaufcms/mcp-gopls
A MCP server for interacting with Go's Language Server Protocol (gopls) and benefit from advanced Go code analysis features.
Related context
Beta — feedback welcome: [email protected]