v1.5.0

What's Changed

• update schema url point to the actual location by @deerajkumar18 in #884
• Bump production to v1.4.1 by @rdimitrov in #952
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.219.0 to 3.220.0 in /deploy by @dependabot[bot] in #953
• Update SECURITY.md to use GitHub Security Advisories by @localden in #977
• Publisher-managed "deleted" support by @pree-dew in #893
• add details of include_deleted in openapi spec by @pree-dew in #1014
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy by @dependabot[bot] in #1034
• build(deps): bump github.com/docker/cli from 29.0.3+incompatible to 29.2.0+incompatible by @dependabot[bot] in #1032
• build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #1031
• build(deps): bump github.com/caarlos0/env/v11 from 11.3.1 to 11.4.0 by @dependabot[bot] in #995
• build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.25.0 to 4.27.0 in /deploy by @dependabot[bot] in #1024
• build(deps): bump the opentelemetry group with 6 updates by @dependabot[bot] in #1025
• build(deps): bump cloud.google.com/go/kms from 1.25.0 to 1.26.0 by @dependabot[bot] in #985
• fix(ci): use deploy/go.mod for deploy workflow Go version and bump root Go to 1.25.8 by @tadasant in #1040
• Bump go by @rdimitrov in #1041

New Contributors

• @deerajkumar18 made their first contribution in #884
• @localden made their first contribution in #977

Full Changelog: v1.4.1...v1.5.0

v1.4.1

What's Changed

• Revert "Restrict @claude bot to mcp org only, fix fork behavior" by @rdimitrov in #851
• Promote prod to 1.4.0 by @rdimitrov in #852
• Ensure no downtime during rollouts by @rdimitrov in #854
• Default to the local registry in the UI by @filmor in #799
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.212.0 to 3.213.0 in /deploy by @dependabot[bot] in #856
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.213.0 to 3.214.0 in /deploy by @dependabot[bot] in #872
• build(deps): bump anchore/sbom-action from 0.20.11 to 0.21.0 in the actions group by @dependabot[bot] in #860
• build(deps): bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 by @dependabot[bot] in #864
• fix(api): reject requests with NUL bytes in URL by @majiayu000 in #869
• fix(publisher): add --help support for subcommands by @majiayu000 in #867
• chore: update licensing to Apache 2.0 for new contributions by @domdomegg in #887
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #888
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.214.0 to 3.215.0 in /deploy by @dependabot[bot] in #880
• build(deps): bump golang.org/x/mod from 0.31.0 to 0.32.0 by @dependabot[bot] in #883
• Handle URL-encoded NUL bytes (%00) in URL path and query by @rdimitrov in #877
• docs: Add MCP registry browser to the community-projects.md page by @vemonet in #889
• Enhanced server.json validation (phase 1) by @BobDickinson in #636
• build(deps): bump github.com/danielgtaylor/huma/v2 from 2.34.1 to 2.35.0 by @dependabot[bot] in #905
• build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.24.1 to 4.25.0 in /deploy by @dependabot[bot] in #899
• build(deps): bump cloud.google.com/go/kms from 1.23.2 to 1.24.0 by @dependabot[bot] in #891
• build(deps): bump actions/checkout from 4 to 6 in the actions group by @dependabot[bot] in #892
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.215.0 to 3.216.0 in /deploy by @dependabot[bot] in #898
• docs: Fix errors and typos in public documentation by @jonathanhefner in #909
• build(deps): bump anchore/sbom-action from 0.21.1 to 0.22.0 in the actions group by @dependabot[bot] in #911
• docs: Add preview disclaimer note to public documentation by @jonathanhefner in #908
• build(deps): bump cloud.google.com/go/kms from 1.24.0 to 1.25.0 by @dependabot[bot] in #913
• build(deps): bump anchore/sbom-action from 0.22.0 to 0.22.1 in the actions group by @dependabot[bot] in #920
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.216.0 to 3.217.1 in /deploy by @dependabot[bot] in #919
• Added /validate endpoint and modified mcp-publish so that all validation happens there by @BobDickinson in #896
• Resolve vulnerability warnings by bumping Go to 1.24.12 by @rdimitrov in #934
• build(deps): bump go.opentelemetry.io/otel/metric from 1.39.0 to 1.40.0 by @dependabot[bot] in #930
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #933
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.217.1 to 3.218.0 in /deploy by @dependabot[bot] in #924
• build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by @dependabot[bot] in #922
• build(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.40.0 by @dependabot[bot] in #927
• build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.39.0 to 1.40.0 by @dependabot[bot] in #928
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in #929
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.61.0 to 0.62.0 by @dependabot[bot] in #939
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.218.0 to 3.219.0 in /deploy by @dependabot[bot] in #941
• Group otel dependencies in a single dependabot PR by @rdimitrov in #935
• Resolve vulnerability warnings by bumping Go to 1.24.13 by @rdimitrov in #938
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.64.0 to 0.65.0 by @dependabot[bot] in #940
• feat(schema): allow template variables in transport URL field by @tadasant in #910
• build(deps): bump golang.org/x/mod from 0.32.0 to 0.33.0 by @dependabot[bot] in #951
• build(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.5 in /deploy by @dependabot[bot] in #950

New Contributors

• @filmor made their first contribution in #799
• @majiayu000 made their first contribution in #869
• @vemonet made their first contribution in #889

Full Changelog: v1.4.0...v1.4.1

v1.4.0

What's Changed

Notable changes

• chore: Release server.json schema version 2025-12-11 by @tadasant in #841
• Update OpenAPI spec to use v0.1 endpoints and make _meta optional by @tadasant in #811
• Add a PUT method to the OpenAPI specification by @rdimitrov in #838
• Add DELETE method to the OpenAPI specification by @rdimitrov in #782

Other

• Update prod to 1.3.10 by @rdimitrov in #780
• Prepare docs for modelcontextprotocol.io by @jonathanhefner in #728
• Fix broken links in README by @jonathanhefner in #786
• Fix remaining broken links from docs reorganization by @jonathanhefner in #789
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 by @dependabot[bot] in #794
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.207.0 to 3.208.0 in /deploy by @dependabot[bot] in #796
• build(deps): bump golang.org/x/crypto from 0.42.0 to 0.45.0 in the go_modules group across 1 directory by @dependabot[bot] in #791
• build(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 in /deploy in the go_modules group across 1 directory by @dependabot[bot] in #792
• Fix missing $schema entries - data migration by @tadasant in #806
• build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.24.0 to 4.24.1 in /deploy by @dependabot[bot] in #798
• build(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 by @dependabot[bot] in #797
• Fix version mismatch in OpenAPI and changelog by @tadasant in #804
• Fix misleading server.json schema URL label by @tadasant in #803
• Upgrade Go to 1.24.11 to fix GO-2025-4155 vulnerability by @tadasant in #815
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.208.0 to 3.210.0 in /deploy by @dependabot[bot] in #817
• Fix issue-743 by sanitizing the URL by @Avish34 in #809
• docs: update API endpoint documentation from /v0/ to /v0.1/ by @tadasant in #802
• Fix command documentation for publish by @joelverhagen in #818
• Add registry extensions specification by @domdomegg in #777
• docs: add production database connection guide for admins by @tadasant in #808
• Restrict @claude bot to mcp org only, fix fork behavior by @tadasant in #819
• docs: fix broken links in Documentation Index by @jonathanhefner in #822
• Add registry maintainer onboarding documentation by @tadasant in #820
• Fix NuGet.org base URL default, improve API integration by @joelverhagen in #813
• build(deps): bump golang.org/x/mod from 0.30.0 to 0.31.0 by @dependabot[bot] in #831
• build(deps): bump go.opentelemetry.io/otel from 1.38.0 to 1.39.0 by @dependabot[bot] in #829
• Add 5s timeout to DNS auth lookup to prevent resource exhaustion by @domdomegg in #825
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.63.0 to 0.64.0 by @dependabot[bot] in #835
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.60.0 to 0.61.0 by @dependabot[bot] in #832
• Ensure tests are failing CI by @rdimitrov in #840
• Update Goreleaser and Cosign by @rdimitrov in #839
• feat: Add LocalTransport/RemoteTransport with URL template variables by @tadasant in #570
• build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #836
• Add NGINX ingress rate limiting to protect against traffic spikes by @rdimitrov in #843
• build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 in the actions group by @dependabot[bot] in #846
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.210.0 to 3.212.0 in /deploy by @dependabot[bot] in #847
• Preserve client IPs and bump NGINX replicas by @rdimitrov in #848
• Set 429 status code responses in the config map by @rdimitrov in #849

Full Changelog: v1.3.10...v1.4.0

v1.3.10

What's Changed

• improve: Add hint about making GitHub org membership public in error messages by @domdomegg in #772
• docs: Update API changelog for v1.3.9 release by @domdomegg in #774
• Update Claude Code GitHub Action from beta to v1 by @domdomegg in #773
• Promote prod to v1.3.9 by @domdomegg in #775
• Add registry authorization specification by @domdomegg in #756
• Add support for ACR (Azure Container Registry) and MCR (Microsoft Container Registry) by @joelverhagen in #754
• build(deps): bump the actions group with 2 updates by @dependabot[bot] in #779

Full Changelog: v1.3.9...v1.3.10

v1.3.9

What's Changed

• Promote prod to 1.3.8 by @rdimitrov in #745
• docs(community): update project link and name to ToolSDK MCP Registry by @Seey215 in #747
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.205.0 to 3.206.0 in /deploy by @dependabot[bot] in #752
• build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.23.0 to 4.24.0 in /deploy by @dependabot[bot] in #755
• docs: Split community projects into sections, and add Java client by @vorburger in #758
• Add simple web UI for browsing the registry by @domdomegg in #757
• build(deps): bump golang.org/x/mod from 0.29.0 to 0.30.0 by @dependabot[bot] in #762
• build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 in the actions group by @dependabot[bot] in #761
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.0 to 1.13.1 by @dependabot[bot] in #760
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.206.0 to 3.207.0 in /deploy by @dependabot[bot] in #766
• build(deps): bump pulumi/actions from 6.6.0 to 6.6.1 in the actions group by @dependabot[bot] in #765
• docs: Add releases administration guide by @domdomegg in #764
• Remove namespace match validation for websiteUrl and remote URL by @joelverhagen in #769

New Contributors

• @vorburger made their first contribution in #758

Full Changelog: v1.3.8...v1.3.9

v1.3.8

What's Changed

• Promote prod to 1.3.7 by @rdimitrov in #727
• Bump go to 1.24.9 by @rdimitrov in #732
• Use the official govulncheck-action by @rdimitrov in #733
• build(deps): bump cloud.google.com/go/kms from 1.23.0 to 1.23.2 by @dependabot[bot] in #729
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.12.0 to 1.13.0 by @dependabot[bot] in #730
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.204.0 to 3.205.0 in /deploy by @dependabot[bot] in #731
• docs(community): Add Awesome MCP Registry project link by @Seey215 in #734

New Contributors

• @Seey215 made their first contribution in #734

Full Changelog: v1.3.7...v1.3.8

v1.3.7

What's Changed

• Promote prod to 1.3.6 by @rdimitrov in #722
• Fix the image tag to strip the v prefix by @rdimitrov in #726

Full Changelog: v1.3.6...v1.3.7

v1.3.6

What's Changed

• Add support for ECDSA P-384 by @joelverhagen in #685
• Fix main by implementing a go1.24 compliant parseRawPrivateKey method by @rdimitrov in #707
• build(deps): bump the actions group with 2 updates by @dependabot[bot] in #709
• feat: add community project link to browsable database by @rosmur in #712
• Make test output less verbose by @rdimitrov in #713
• feat: add CORS support to registry API by @ironsteadlabs in #711
• fix: detect server subfolder in init by @MaxKless in #566
• fix formatting in community-projects.md by @formulahendry in #715
• Remove the test-unit-verbose target by @rdimitrov in #716
• Add support for Google Artifact Registry (GAR) by @rdimitrov in #692
• Add go-mcp-registry to community projects by @leefowlercu in #719
• Enable Google KMS and Azure Key Vault for publisher login tool by @joelverhagen in #696
• Make Repository field properly optional in server.json by @rdimitrov in #717
• Upgrade cosign to version v2.6.1 by @rdimitrov in #720
• Use ko in favour of docker build by @rdimitrov in #708
• Implement --token and MCP_GITHUB_TOKEN login support by @rdimitrov in #705

New Contributors

• @rosmur made their first contribution in #712
• @ironsteadlabs made their first contribution in #711
• @MaxKless made their first contribution in #566
• @leefowlercu made their first contribution in #719

Full Changelog: v1.3.5...v1.3.6

v1.3.5

What's Changed

• Revert cosign to 3.10.1 instead of 4.0.0 by @rdimitrov in #706
• Update README with API freeze announcement by @rdimitrov in #704
• Clarify the docs around _meta publisher extensions by @rdimitrov in #695

Full Changelog: v1.3.4...v1.3.5

v1.3.4

What's Changed

• Promote prod to 1.3.3 by @rdimitrov in #687
• build(deps): bump the actions group with 2 updates by @dependabot[bot] in #688
• Add failure modes telemetry by @pree-dew in #646
• Disable automatic sync schedule in sync-db.yml by @rdimitrov in #693
• Enable dependabot for /deploy and pin Go version to 1.24 by @rdimitrov in #697
• build(deps): bump github.com/pulumi/pulumi-gcp/sdk/v8 from 8.39.0 to 8.41.1 in /deploy by @dependabot[bot] in #699
• build(deps): bump anchore/sbom-action from 0.20.8 to 0.20.9 in the actions group by @dependabot[bot] in #702
• build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.175.0 to 3.204.0 in /deploy by @dependabot[bot] in #700
• build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.18.2 to 4.23.0 in /deploy by @dependabot[bot] in #701

Full Changelog: v1.3.3...v1.3.4