This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Summary
AI summaryFixed gitlab_repository_blob to return decoded content and raised E2E test coverage from 76.3% to 99.3%.
Full changelog
Release Notes: v2.4.0 → v2.4.1
Bug Fixes
- #216 — Gated merge request dependencies and group webhooks as Premium in the action catalog (doc-grounded and live-verified: GitLab CE returns 404 for both families). Free/CE instances no longer see 14 tools that could never work on their tier
- #216 — Fixed the edition-tier auditor blind spot that let those mislabels through: it now follows cross-page and user-doc tier badges instead of only the owner domain's API page, and records live-verified exceptions (e.g.
approval_stateis Premium in practice despite docs listing it as Free) - #215 —
gitlab_repository_blobnow returns the decoded blob content instead of the raw JSON+base64 transport envelope - #215 — Submodule tools honor their documented default-branch fallback (HEAD alias) instead of failing with 400 when
refis omitted - Fly.io deploy fixed — the v2.4.0 release deploy failed because the 256 MB VM OOM-killed the server at startup (~160 MiB RSS with the 865-action catalog); the VM is now 512 MB and a standing
fly-debugworkflow provides flyctl diagnostics/redeploy from Actions
Improvements
- #215 — E2E action coverage raised from 76.3% to 99.3% of the 1,062-action catalog (~90 new test functions across CE and EE, all validated against ephemeral GitLab 19.0.1), with a new
audit_e2e_gapstool to keep measuring it. The only uncovered actions are 7 documented permanent skips - #215 — E2E Docker environment: CI jobs can now clone repositories (internal clone URL root) and direct-transfer migrations are enabled at provisioning
- #216 —
gen_statsno longer counts.claudeagent worktrees, making repository metrics deterministic
Full diff: https://github.com/jmrplens/gitlab-mcp-server/compare/v2.4.0...v2.4.1
Commits: 7 | Pull Requests: 2 | Files Changed: 61 (+9,509 / −198)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About jmrplens/gitlab-mcp-server
Complete GitLab REST API v4 coverage with 1006 MCP tools across 162 domains, 42 meta-tools, 24 resources, and 38 prompts. Cross-platform Go binary with stdio and HTTP transports, OAuth support, auto-update, read-only and safe modes.
Beta — feedback welcome: [email protected]