This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryDocker Hub image support for the HackMD MCP server is deprecated and will be removed on November 1 2025.
Full changelog
What's Changed
Docker Image
- [Deprecated] Remove image support for Docker Hub
- Update README to use GitHub Container Registry
- Add missing
pnpm-workspace.yamltoDockerfile
GitHub Actions
- Support GitHub Container Registry publish action
- Add release environment for GitHub OCI and MCP Registry
- Rename
releasetorelease-npmfor npm release environment
MCP Registry
- Update
server.jsonschema
MCP Bundles (MCBP)
- Add privacy policy URL to
manifest.json
package.json
- Upgrade dependencies
- Upgrade package manager
:warning: Deprecation Notice
Docker Hub Image Deprecation
The HackMD MCP server Docker image on Docker Hub (docker.io) is being deprecated in favor of GitHub Container Registry (ghcr.io).
- Docker Hub Image Removal Date: November 1, 2025
- Migration Path: Please update your deployments to use
ghcr.io/yuna0x0/hackmd-mcpinstead of the Docker Hub image. Users who are using versions< 1.4.2should build the Docker image from source.
The Docker Hub image will no longer receive updates starting from this release v1.5.1. After November 1, 2025, all images on Docker Hub will be removed.
Releases >= 1.4.2 have images published to GitHub Container Registry. For versions < 1.4.2, please build the Docker image from source, as these versions are not available on GitHub Container Registry.
All future releases will only be published to GitHub Container Registry.
Migration Example:
# Old (deprecated)
docker pull yuna0x0/hackmd-mcp
# New
docker pull ghcr.io/yuna0x0/hackmd-mcp
Full Changelog: https://github.com/yuna0x0/hackmd-mcp/compare/v1.5.0...v1.5.1
Breaking Changes
- Removal of official Docker Hub images (yuna0x0/hackmd-mcp) on November 1 2025
- Rename GitHub Actions release environment from `release` to `release-npm`
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]