This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+8 more
Summary
AI summaryMCP tool handlers now return full JSON data instead of text summaries, fixing the add_namespace false‑zero report.
Full changelog
This release focuses on MCP tool response, code quality improvements, test reliability, and bug fixes identified by GitHub's security scorecard and code quality analysis tools.
Bug Fixes
MCP Tool Response Format
- Fixed all 24 MCP tool handlers to return complete JSON data instead of text summaries
- AI clients now receive full structured data when using MCP tools like
list_services,add_namespace, etc. - Resolves issue where
add_namespacereported "Discovered 0 services" despite successful forwarding
SLSA Provenance Generation
- Fixed artifact hash generation in release workflow
- Previous implementation failed silently when certain file types (e.g.,
.zip) didn't exist - Now uses
findcommand to reliably locate all artifacts before hashing
Test Improvements
Eliminated Flaky Tests
- Replaced
time.Sleeppatterns with proper synchronization usingwaitForConditionhelper - Affected tests in
pkg/fwdsvcregistrynow poll for conditions instead of arbitrary delays
Race Condition Fixes
- Replaced
sync.Oncewith mutex-protected bool inpkg/fwdapi/manager.goandpkg/fwdapi/logbuffer.go - Tests can now properly reset and restore global state without race conditions
Code Quality
- Replaced confusing
string(rune('0'+i))patterns withfmt.Sprintffor clarity - Fixed invalid port number (99999 → 65535) in network error test
- Replaced custom
containshelper withstrings.Contains - Improved non-string conversion test to verify actual type assertions
Build/CI Improvements
- Pinned GoReleaser version to
~> v2.13in both CI and release workflows - Improved artifact hash generation reliability for SLSA provenance
Full Changelog
Changed Files
.github/workflows/ci.yml- Pin GoReleaser version.github/workflows/release.yml- Pin GoReleaser version, fix hash generationpkg/fwdapi/logbuffer.go- Replace sync.Once with mutex patternpkg/fwdapi/logbuffer_test.go- Improve test reliability and claritypkg/fwdapi/manager.go- Replace sync.Once with mutex patternpkg/fwdapi/manager_test.go- Update for new initialization patternpkg/fwdmcp/httpclient_test.go- Fix invalid port numberpkg/fwdmcp/tools.go- Return nil CallToolResult for proper JSON responsespkg/fwdmcp/tools_test.go- Update tests for new handler behaviorpkg/fwdmetrics/httpsniff_test.go- Replace confusing string expressionspkg/fwdns/manager_test.go- Use strings.Containspkg/fwdsvcregistry/fwdsvcregistry_test.go- Add waitForCondition, eliminate time.Sleep
Changelog
- 0271289c76dd59e49abe8b15784f20dc4779bbbd MCP Registry Readiness (#341)
- 1f7def59878ef59ae720871e4ad67e8c3e12a552 MCP and Test Quality Improvements (#342)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About txn2/kubefwd
Kubernetes bulk port forwarding with service discovery, /etc/hosts management, traffic monitoring, and pod log streaming
Related context
Related tools
Beta — feedback welcome: [email protected]