Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package github-mcp-server for
openSUSE:Factory checked in at 2026-08-20 16:15:29
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/github-mcp-server (Old)
and /work/SRC/openSUSE:Factory/.github-mcp-server.new.1258 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "github-mcp-server"
Thu Aug 20 16:15:29 2026 rev:3 rq:1372115 version:1.10.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/github-mcp-server/github-mcp-server.changes
2026-08-11 17:16:10.643609455 +0200
+++
/work/SRC/openSUSE:Factory/.github-mcp-server.new.1258/github-mcp-server.changes
2026-08-20 16:15:39.227009949 +0200
@@ -1,0 +2,39 @@
+Thu Aug 20 05:49:46 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to version 1.10.0:
+ * Repository deletion is now a confirmed, elicitation-gated
+ tool (form round-trip, protected state); unknown static
+ --tools names fail closed at startup instead of being ignored.
+ * Bearer tokens are sent only to configured GitHub authorities,
+ and GitHub Enterprise hosts must be HTTPS so credentials are
+ not sent in the clear.
+ * Lockdown, HTTP request limits, per-caller cache isolation,
+ raw URL traversal rejection and response sanitization were
+ hardened; lockdown cannot be relaxed by a request.
+ * Symbolic-link file writes require explicit
+ allow_symlink_write; get_file_contents identifies symlinks
+ and labels dereferenced content. Binary MCP resources are no
+ longer base64-encoded twice.
+ * list_issues and search_issues degrade when GHES lacks issue
+ custom-field GraphQL types; list_issues returns assignee
+ logins and stable empty arrays for unassigned issues.
+ * Project view lifecycle operations and visible-field
+ configuration were added; Actions and other successful
+ responses were trimmed.
+ * add_issue_comment validates mutually exclusive input modes;
+ issue_write accepts delete:false as a no-op for strict-schema
+ clients; omitted arguments are accepted on zero-parameter
+ tools while explicit null is rejected.
+ * Notification subscription tools advertise destructive
+ behaviour; Copilot review-request denials return actionable
+ guidance instead of a bare 404.
+- Re-vendor Go modules: github.com/stretchr/testify 1.11.1 to
+ 1.12.0 (test-only; not linked into the binaries). Production
+ module set is unchanged, so the licence audit stands: all
+ vendored modules linked into the binaries are MIT,
+ BSD-3-Clause or Apache-2.0 and no copyleft code is linked.
+- Keep github-mcp-server-root-command-name.patch: upstream pull
+ request 2998 is still open, and the cobra root command is still
+ declared as "server" in this release.
+
+-------------------------------------------------------------------
Old:
----
github-mcp-server-1.9.0.tar.zst
New:
----
github-mcp-server-1.10.0.tar.zst
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ github-mcp-server.spec ++++++
--- /var/tmp/diff_new_pack.aM3ZJv/_old 2026-08-20 16:15:40.801065636 +0200
+++ /var/tmp/diff_new_pack.aM3ZJv/_new 2026-08-20 16:15:40.805065778 +0200
@@ -23,7 +23,7 @@
# -modcacherw leave the module cache writable so cleanup cannot fail
%define goflags "-buildmode=pie -mod=vendor -modcacherw"
Name: github-mcp-server
-Version: 1.9.0
+Version: 1.10.0
Release: 0
Summary: Model Context Protocol server for GitHub
License: MIT
++++++ _service ++++++
--- /var/tmp/diff_new_pack.aM3ZJv/_old 2026-08-20 16:15:40.880068431 +0200
+++ /var/tmp/diff_new_pack.aM3ZJv/_new 2026-08-20 16:15:40.886068643 +0200
@@ -3,8 +3,8 @@
<param name="url">https://github.com/github/github-mcp-server</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
- <param name="revision">v1.9.0</param>
- <param name="version">1.9.0</param>
+ <param name="revision">v1.10.0</param>
+ <param name="version">1.10.0</param>
<param name="changesgenerate">disable</param>
</service>
<service name="recompress" mode="manual">
@@ -13,7 +13,7 @@
</service>
<service name="go_modules" mode="manual">
<param name="compression">zst</param>
- <param name="archive">github-mcp-server-1.9.0.tar.zst</param>
+ <param name="archive">github-mcp-server-1.10.0.tar.zst</param>
</service>
</services>
++++++ github-mcp-server-1.9.0.tar.zst -> github-mcp-server-1.10.0.tar.zst
++++++
++++ 14876 lines of diff (skipped)
++++++ vendor.tar.zst ++++++
++++ 7377 lines of diff (skipped)