[deps-release-notes] mcpg — upstream release action items

[github-actions]

Rolling upstream release action items — mcpg

This is the single canonical tracking issue for action items from new mcpg releases. The update-awf-version workflow appends a comment here for each version bump going forward — the most recent activity lives in the comments below. This body consolidates everything filed so far.

Latest pinned version covered: 0.3.32

Consolidated history (earliest → latest)

0.3.12 → 0.3.23 (was #882)

• OTel span attributes aligned with gen_ai semantic conventions (v0.3.16): MCPG now emits OTel spans following the OpenTelemetry gen_ai semconv. ado-aw's audit analyzer (src/audit/analyzers/otel.rs) may need updating if it relies on specific MCPG span field names.
• Per-session tool call limits in allow-only guard policies (v0.3.20): MCPG enforces per-session limits in allow-only mode; ado-aw could expose as a configurable field (e.g., tools.call-limit:).
• Timeout fields added to embedded JSON schema (v0.3.23): MCPG config schema now includes timeout fields; ado-aw should review whether to surface in engine: or tools: front-matter.
• Security: GHE Cloud data residency proxy routing fix (v0.3.23): GraphQL requests were routed to wrong upstream for GHE Cloud data-residency tenants; fixed automatically on version bump.

0.3.23 → 0.3.24 (was #903)

• Breaking: "API key" surface renamed to "Agent ID" (v0.3.24): Deprecated compatibility aliases removed; gateway now uses X-Agent-ID for routing. Audit MCPG config types in src/compile/extensions/mod.rs for any removed alias fields.
• Unauthenticated /reflect endpoint for live DIFC label snapshots (v0.3.24): New diagnostics endpoint; ado-aw's audit/status commands could use this for richer DIFC diagnostics.

0.3.23 → 0.3.25 (was #931)

• Security: $ENV expansion disabled in tool response filters (v0.3.25): Prevents environment variable leakage/injection through crafted tool responses. Verify any custom filter expressions remain functional.
• Metadata endpoint allowlisting (v0.3.25): MCPG proxy now allowlists metadata endpoints and passes through unrecognized reads; may resolve prior MCP client liveness/metadata call blocking.

0.3.25 → 0.3.26 (was #1059)

• OTLP multi-endpoint fan-out via GH_AW_OTLP_ENDPOINTS (v0.3.26): MCPG supports sending OTel telemetry to multiple OTLP endpoints; ado-aw could expose in compiled pipeline variables.
• Deprecation: MCP_GATEWAY_API_KEY → MCP_GATEWAY_AGENT_ID (v0.3.26): run.sh now reads MCP_GATEWAY_AGENT_ID with deprecated fallback for MCP_GATEWAY_API_KEY. ado-aw generates pipelines that set MCP_GATEWAY_API_KEY (src/compile/agentic_pipeline.rs, src/compile/common.rs); migrate to MCP_GATEWAY_AGENT_ID before the fallback is removed.

0.3.25 → 0.3.27 (was #1119)

• GitHub MCP Server v1.3.0 support (v0.3.27): MCPG routes PR commits and supports get_file_blame spec; verify GitHub MCP extension config + network allowlists are compatible.
• refusal-labels guard policy (v0.3.27): New guard policy type for classifying agent refusals; ado-aw could expose in MCPG configuration.
• MCP_GATEWAY_SHUTDOWN_TIMEOUT env var documented (v0.3.27): ado-aw could expose in generated pipeline teardown steps.

0.3.25 → 0.3.28 (was #1169)

• Security: wazero WASM guard hardening (v0.3.28): Added memory cap and backend call limit to wazero WASM runtime; protects against malicious/malformed WASM guards. Consumers benefit automatically on upgrade.

0.3.25 → 0.3.29 (was #1185)

• Security: DIFC labeling gaps covered (v0.3.28): get_code_quality_finding, ui_get, add_gpg_key, add_ssh_key previously lacked DIFC integrity/secrecy labels; gap now closed. Older MCPG versions did not enforce integrity for these operations.
• Opt-in observed URL domain audit pipeline (v0.3.29): Records which URL domains appear in MCP tool responses + write sinks; ado-aw could expose opt-in flag and surface data in ado-aw audit reports.

0.3.29 → 0.3.31 (was #1242)

• Gateway domain validation widened to RFC-1123 topology hostnames (v0.3.30): Accepts topology hostnames like my-server.namespace.svc.cluster.local; fixes unexpected validation errors.
• Prompt passthrough via go-sdk (v0.3.31): Fixes context propagation + adds prompt passthrough through SDK-mediated backend calls.
• DIFC proxy GHEC data-residency REST API host derivation fix (v0.3.31): Fixes wrong API host calculation for GHEC data-residency deployments.

0.3.29 → 0.3.32 (was #1253) — canonical

• GitHub reaction operations classified as WRITE_OPERATIONS (v0.3.32): Adding/removing emoji reactions now subject to DIFC integrity enforcement. Agents calling GitHub reaction APIs require adequate DIFC integrity clearance. This is a security tightening — confirm DIFC integrity level is configured correctly.

---

Consolidated by the Deps Release-Notes Consolidator workflow. Superseded per-release issues were closed and point here.

Generated by Deps Release-Notes Consolidator · 319.3 AIC · ⌖ 17.7 AIC · ⊞ 6.6K · ◷

[github-actions]

mcpg 0.3.29 → 0.3.33

Releases analyzed

• v0.3.30
• v0.3.31
• v0.3.32
• v0.3.33

Security fixes

• DIFC reaction operations classification (v0.3.32): fix(guard): add reaction operations to WRITE_OPERATIONS and DIFC rules — GitHub reaction operations (👍/👎 etc.) were previously missing from the WRITE_OPERATIONS and DIFC enforcement rules. They are now correctly classified. ado-aw workflows whose agent uses reaction tools may see tighter authorization enforcement after this MCPG upgrade.
• DIFC GHEC data-residency host derivation (v0.3.31): Fix DIFC proxy GHEC data-residency REST API host derivation — the DIFC proxy was incorrectly deriving the REST API host for GitHub Enterprise Cloud (GHEC) data-residency domains. Fixed to ensure DIFC policies apply correctly to GHEC endpoints.

Deprecations

• api_key deprecated in favour of agent_id (v0.3.33): Replace deprecated api_key with agent_id in example config — if ado-aw's compiled pipelines or documentation reference the api_key MCPG config field, they should be updated to use agent_id instead.

Generated by Dependency Version Updater · 122.6 AIC · ⌖ 15.2 AIC · ⊞ 10.9K · ◷

[github-actions]

mcpg 0.3.29 → 0.4.0

Releases analyzed

• v0.3.30
• v0.3.31
• v0.3.32
• v0.3.33
• v0.4.0

Security fixes

• Reaction operations added to WRITE_OPERATIONS and DIFC rules (v0.3.32): GitHub reaction operations (e.g. adding a thumbs-up on an issue or PR) were not classified as write operations in the DIFC guard and were missing from WRITE_OPERATIONS. They now are. No ado-aw changes needed; this confirms reactions are properly gated at the MCPG layer.
• Sink-visibility guard policy prevents GitLost exfiltration (v0.4.0): New write-sink guard policy (Add sink-visibility to write-sink guard policy to prevent GitLost exfiltration) checks sink visibility before allowing writes, preventing a class of exfiltration where an agent could write to a private or unlisted sink. No ado-aw changes required; defense-in-depth improvement at the MCPG guard layer.

Notable features for ado-aw to adopt

• ToolAnnotations no longer dropped in routed mode (v0.4.0): Fix ToolAnnotations drop in routed mode — tool annotations were silently dropped in multi-backend (routed) mode. Since ado-aw uses routed mode for its MCP setup, tool annotations set by ado-aw's safe-outputs MCP tools are now correctly propagated to the agent.
• OTel tracing improvements (v0.4.0): feat(tracing): OTel improvements from go-fan review — improved OpenTelemetry span and trace coverage in the MCPG routing layer; better observability for diagnosing tool-call latency and routing hops in ado-aw audit.
• Gateway domain validation widened to RFC-1123 topology hostnames (v0.3.30): fix: widen gateway.domain validation to accept RFC-1123 topology hostnames — gateway.domain now accepts hostnames like mcpg.namespace.svc.cluster.local; relevant for ado-aw users deploying MCPG inside Kubernetes clusters.

Deprecations

• api_key config field deprecated in favor of agent_id (v0.3.33): Replace deprecated api_key with agent_id in example config — the api_key field in MCPG config has been replaced by agent_id. Audit ado-aw's MCPG config generation (e.g. src/compile/extensions/safe_outputs.rs, src/compile/common.rs) for any api_key field emission and migrate to agent_id.

Generated by Dependency Version Updater · 180.6 AIC · ⌖ 14.4 AIC · ⊞ 10.9K · ◷