Skip to content

imatza-rh/mcp-zuul

v0.8.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 28d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ansible ci-cd devops mcp mcp-server model-context-protocol
+2 more
zuul zuul-ci

Affected surfaces

auth

Summary

AI summary

Added seven new CLI tools and updated the PyPI description.

Full changelog

Added

  • promote tool: reorder changes in a pipeline queue (write operation, requires auth). Use for urgent fixes when the gate has a long queue
  • get_autohold tool: get full details of a specific autohold request — held nodes, timing, project/job
  • list_system_events tool: list system events (config updates, reconfigurations, pipeline changes). Useful for debugging "why did my job stop running?"
  • list_providers tool: list nodepool cloud providers with flavors, images, and labels
  • list_images tool: list nodepool disk images with build status and provider upload state
  • get_badge tool: get a CI status badge URL (SVG) for a project, with embeddable Markdown snippet
  • smithery.yaml for Smithery registry integration
  • CODE_OF_CONDUCT.md (Contributor Covenant v2.1)
  • Download count badge in README
  • Listings section in README with all marketplace links

Changed

  • PyPI description updated to "build failure analysis, log search, pipeline status, and job configuration" (previously said "read-only access")
  • Added PyPI classifiers: Build Tools, Systems Administration
  • Tool count: 38 → 44 (36 read-only + 6 write + 1 LogJuicer + 1 console stream)

Fixed

  • get_badge uses urllib.parse.urlencode for query parameters instead of raw string concatenation, preventing URL injection via project names containing special characters
  • list_system_events only sends non-default query parameters, consistent with other tools

Security Fixes

  • `get_badge` fixed to use `urllib.parse.urlencode` preventing URL injection from special characters in project names

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track imatza-rh/mcp-zuul

Get notified when new releases ship.

Sign up free

About imatza-rh/mcp-zuul

Zuul CI integration with 14 tools for build failure analysis, log search, pipeline status, and job configuration.

All releases →

Beta — feedback welcome: [email protected]