[release] v0.3.23 #7063

🌟 Release Highlights

This release focuses on reliability, correctness, and code quality — with notable bug fixes for proxy routing, schema validation improvements, performance gains in the Rust guard layer, and a dependency update to MCP Go SDK v1.6.1.

🐛 Bug Fixes

• GraphQL proxy routing corrected for GHE Cloud (#6861): /api/graphql requests are now routed to the correct upstream endpoint for GitHub Enterprise Cloud data residency configurations, preventing misdirected API calls in multi-tenant environments.
• Timeout fields added to embedded JSON schema (#6908): connectTimeout and toolTimeout fields were missing from the embedded JSON schema used for stdin config validation. They are now correctly included, ensuring editor auto-complete and schema-driven validation work as expected.

✨ What's New

• MCP Go SDK upgraded to v1.6.1 (#6995): Picks up upstream protocol fixes and adds a DisableStandaloneSSE canary to track a future SSE transport upgrade path.
• Graceful proxy shutdown (#7047): The proxy sub-command now performs a clean HTTP drain on exit (with a 5-second timeout) instead of immediately tearing down connections. Shutdown errors are also propagated and logged rather than silently discarded.
• Unified payload-size threshold validation (#7045): payloadSizeThreshold / MCP_GATEWAY_PAYLOAD_SIZE_THRESHOLD is now validated consistently across both TOML and JSON stdin config paths, catching bad values early at startup.

⚡ Performance

• Rust guard: reduced allocations in list_releases (#7048, #6990): Merged-integrity labels are now computed once and shared via Arc clones across items in the same repo, eliminating per-item deep copies. get_file_contents and list_releases also had redundant Vec clones removed.
• Guard label lookup optimized (#6846): Tool classification lookups in the Rust guard layer use more efficient data structures, reducing overhead on high-traffic tool calls.

📚 Documentation

Multiple documentation files were reconciled with the current implementation:

• --otlp-sample-rate flag now documented in the tracing reference (#6798)
• OpenTelemetry headers and sample_rate fields restored to the stdin schema docs (#7042)
• TOML-only rate-limit fields and legacy JSON stdin aliases clarified (#6916, #6830)
• Go version guidance and config semantics aligned with the current implementation (#6998)

🐳 Docker Image

The Docker image for this release is available at:

docker pull ghcr.io/github/gh-aw-mcpg:v0.3.23
# or
docker pull ghcr.io/github/gh-aw-mcpg:latest

Supported platforms: linux/amd64, linux/arm64

For complete details, see the full release notes.

Generated by Release · sonnet46 771.8K · ◷