This release is primarily a maintenance and hardening release for MCP Gateway, focused on strengthening test coverage, refactoring the Go and Rust guard internals, and polishing configuration/documentation. A few user-visible improvements are included around config validation and CLI ergonomics.
✨ What's New
🐛 Bug Fixes & Improvements
📚 Documentation
🔧 Under the Hood
This release also includes an extensive series of internal improvements: expanded unit test coverage across guard, DIFC, proxy, server, and CLI packages; deduplication and centralization of shared helpers in the Rust guard (PR fork detection, read-sub-method checks, field-name constants); refactors to DIFC label aggregation and GitHub guard write inventories; and additional debug logging across startup, tracing, and WASM guard execution paths. These changes don't alter user-facing behavior but improve reliability and maintainability going forward.
🐳 Docker Image
The Docker image for this release is available at:
docker pull ghcr.io/github/gh-aw-mcpg:v0.4.10
# or
docker pull ghcr.io/github/gh-aw-mcpg:latest
Supported platforms: linux/amd64, linux/arm64
For complete details, see the full release notes.
Generated by Release · auto · 22.3 AIC · ⊞ 11K · ◷
This release is primarily a maintenance and hardening release for MCP Gateway, focused on strengthening test coverage, refactoring the Go and Rust guard internals, and polishing configuration/documentation. A few user-visible improvements are included around config validation and CLI ergonomics.
✨ What's New
$refsupport in config schema validation — configs can now reference remote JSON Schema$refs, with clearer structured error context when validation fails (Config schema validation: support remote custom$refand expand structured error context #11226).MarkFlagsMutuallyExclusiveto catch conflicting--allowonly-scope-*flags earlier and with better error messages (Use cobra's MarkFlagsMutuallyExclusive for AllowOnly scope flags #11408).🐛 Bug Fixes & Improvements
gatewayconfig section is optional — the docs now accurately reflect required configuration (Fix README claim that thegatewayconfig section is optional #11296).create_projectcorrectly under the Projects v2 DIFC write arm in the guard, closing a gap where the operation could be mislabeled ([Repo Assist] fix(guard): classify create_project in Projects v2 DIFC write arm #11326).📚 Documentation
containerRuntimeArgsand the optional JSONgatewaysection (Docs: reconcile config guidance forcontainerRuntimeArgsand optional JSONgateway#11062).🔧 Under the Hood
This release also includes an extensive series of internal improvements: expanded unit test coverage across guard, DIFC, proxy, server, and CLI packages; deduplication and centralization of shared helpers in the Rust guard (PR fork detection, read-sub-method checks, field-name constants); refactors to DIFC label aggregation and GitHub guard write inventories; and additional debug logging across startup, tracing, and WASM guard execution paths. These changes don't alter user-facing behavior but improve reliability and maintainability going forward.
🐳 Docker Image
The Docker image for this release is available at:
docker pull ghcr.io/github/gh-aw-mcpg:v0.4.10 # or docker pull ghcr.io/github/gh-aw-mcpg:latestSupported platforms:
linux/amd64,linux/arm64For complete details, see the full release notes.