jmrplens/gitlab-mcp-server

Highlights

This release rolls up everything merged since v2.5.0, headlined by the GitLab client-go v2.51.0 upgrade with strict 1:1 API mirroring, plus a full toolchain/dependency refresh and documentation work.

🚀 GitLab client-go v2.51.0 — new API fields mirrored 1:1

Every new field the SDK added between v2.46.0 and v2.51.0 is now exposed by the MCP tools, with correct types, schemas, markdown, and tests:

• Groups — crm_enabled on group read/create/update (Customer Relations).
• Merge requests — non_archived list filter (project-, group-, and instance-scoped lists, plus deployment merge requests).
• Projects — mr_default_title_template.
• Work items — children hierarchy on work-item output.
• Audit events — object-valued change is now surfaced as an open JSON change_object, and the plural changes[] array is included.

Regression fixed: client-go v2.49.0 made ListWorkItems return CE fields only by default. The epic list path now explicitly opts into the Enterprise fields it maps (weight, status, color, health_status) so they are no longer silently empty on Premium/Ultimate instances.

🔧 Toolchain, dependencies & CI

• Go 1.26.5 toolchain; all Go modules refreshed to latest (client-go v2.51.0, go-selfupdate v1.6.0, x/crypto v0.54.0, x/tools v0.48.0, and more).
• GitHub Actions setup-go / setup-node / setup-python bumped to v7 across all workflows.
• Docs site dependencies updated (Astro 7.1.3, ESLint 10.7, eslint-plugin-astro 3, @typescript-eslint 8.65, Prettier 3.9.5); patched the brace-expansion ReDoS advisory. TypeScript is held at 6.x pending astro check support for TS 7.
• Security scanning: documented, allowlisted the one unfixable govulncheck advisory (GO-2026-5932, x/crypto/openpgp reached only via go-selfupdate for release-signature verification; no fixed version exists).
• Hardened the CI TestIndividual_JobExtras E2E test (deflaked the manual-job cancel/retry lifecycle).

📚 Documentation & packaging

• Claude Desktop (.mcpb) extension guide and privacy-policy pages (EN/ES).
• Install-path and directory-metadata audit across README and the site.
• Homebrew tap formula now published on every release; LobeHub MCP badge added.

Changelog

✨ Features

• af71814660da3ef7ba89cd4964dfc5292993350d: feat(release): publish Homebrew tap formula on every release (#228) (@jmrplens)
• 0f6d0414e5919ba67288394f0b020da3f527d453: feat: client-go v2.51.0 — 1:1 field mirroring (CRM, MR title template, non-archived, work-item children, audit change objects) + epic ReturnedFields fix (#238) (@jmrplens)

📚 Documentation

• 37e6bddb5e02c5a489faa21d25496cc125152d82: docs(readme): add LobeHub MCP badge next to Glama (@jmrplens)
• 7d86ead3a9cfb0911467025e32080b832de8ed50: docs(site): Claude Desktop (.mcpb) guide + privacy policy pages (EN/ES) (#227) (@jmrplens)
• f18a442e42e85109614d60935f2e6b03149bbd92: docs: audit install paths and directory metadata (markdown + site EN/ES) (#229) (@jmrplens)

🚧 Maintenance

• abea2d5916d6c35aaf9b6d85a1f69c4d6be04d26: chore(deps): update GitHub Actions (setup-* v7) and site pnpm dependencies (#239) (@jmrplens)
• 84c61c03c22a95943b082d36acaf4fdee0623877: chore: Go 1.26.5 toolchain + site lint devDep patches (#230) (@jmrplens)
• 746491b1364a25593867ea81545a71b09c498d79: chore: update manifests for v2.5.0 (@jmrplens)
• 2199d96fae597cb6a2d32553253233ecc3f846a5: chore: version bump to 2.5.1 (#240) (@jmrplens)