This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryMinor fixes and improvements.
Full changelog
What's Changed
- Bump github.com/google/go-containerregistry from 0.20.3 to 0.20.5 by @dependabot[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/7
- Bump github.com/mark3labs/mcp-go from 0.25.0 to 0.30.0 by @dependabot[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/8
- Add ToolHive packaged usage instructions by @JAORMX in https://github.com/StacklokLabs/ocireg-mcp/pull/9
- Bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by @dependabot[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/11
- Bump github.com/google/go-containerregistry from 0.20.5 to 0.20.6 by @dependabot[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/12
- Normalize governance docs by @danbarr in https://github.com/StacklokLabs/ocireg-mcp/pull/15
- Update README by @danbarr in https://github.com/StacklokLabs/ocireg-mcp/pull/16
- Bump github.com/mark3labs/mcp-go from 0.30.0 to 0.33.0 by @dependabot[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/19
- Bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @dependabot[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/17
- Bump sigstore/cosign-installer from 3.8.2 to 3.9.1 by @dependabot[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/14
- Configure Renovate by @renovate[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/18
- Update sigstore/cosign-installer action to v3.9.2 by @renovate[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/20
- Update module github.com/mark3labs/mcp-go to v0.36.0 by @renovate[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/22
- Update module github.com/mark3labs/mcp-go to v0.37.0 by @renovate[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/24
- Delete .github/dependabot.yml by @rdimitrov in https://github.com/StacklokLabs/ocireg-mcp/pull/21
- Update actions/checkout action to v5 - autoclosed by @renovate[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/25
- MCP Trust Score by @Matvey-Kuk in https://github.com/StacklokLabs/ocireg-mcp/pull/26
- Update module github.com/mark3labs/mcp-go to v0.38.0 by @renovate[bot] in https://github.com/StacklokLabs/ocireg-mcp/pull/27
New Contributors
- @dependabot[bot] made their first contribution in https://github.com/StacklokLabs/ocireg-mcp/pull/7
- @danbarr made their first contribution in https://github.com/StacklokLabs/ocireg-mcp/pull/15
- @renovate[bot] made their first contribution in https://github.com/StacklokLabs/ocireg-mcp/pull/18
- @Matvey-Kuk made their first contribution in https://github.com/StacklokLabs/ocireg-mcp/pull/26
Full Changelog: https://github.com/StacklokLabs/ocireg-mcp/compare/v0.0.4...v0.0.5
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About StacklokLabs/ocireg-mcp
An SSE-based MCP server that allows LLM-powered applications to interact with OCI registries. It provides tools for retrieving information about container images, listing tags, and more.
Related context
Beta — feedback welcome: [email protected]