• v1.4.18-alpha 2daba35e7f

    v1.4.18-alpha
    All checks were successful
    CI / lint (push) Successful in 7s
    Publish / detect-release (push) Successful in 4s
    CI / security (push) Successful in 7s
    Publish / tag (push) Successful in 3s
    CI / test (push) Successful in 16s
    Publish / publish-forgejo (push) Successful in 10s
    Publish / publish-npm (push) Successful in 10s
    Publish / promote-release (push) Successful in 1s
    Publish / publish-container (push) Successful in 24s
    Pre-release

    Gravity Bot released this 2026-02-16 07:07:56 +00:00 | 74 commits to main since this release

    What's Changed

    Setup Wizard

    • Diagnostic output: Auth validation now prints "Validating API key... ✓/✗" so users can see whether the check executes
    • Integration tests: Added full HTTP round-trip tests verifying raw status codes + testAuth interpretation for both correct and wrong keys

    Testing

    • 2 new integration tests for auth validation flow
    • Total: 227 tests passing

    Full Changelog: https://git.bros.ninja/mike/open-project-sidecar-mcp/compare/v1.4.17-alpha...v1.4.18-alpha

    Downloads
  • v1.4.17-alpha c4bf8e055a

    v1.4.17-alpha
    All checks were successful
    CI / lint (push) Successful in 9s
    Publish / detect-release (push) Successful in 6s
    CI / security (push) Successful in 9s
    CI / test (push) Successful in 16s
    Publish / tag (push) Successful in 4s
    Publish / publish-forgejo (push) Successful in 8s
    Publish / publish-npm (push) Successful in 13s
    Publish / promote-release (push) Successful in 1s
    Publish / publish-container (push) Successful in 24s
    Pre-release

    Gravity Bot released this 2026-02-16 06:56:13 +00:00 | 76 commits to main since this release

    What's Changed

    Setup Wizard Improvements

    • Handle existing MCP config: When claude mcp add fails because a config already exists, the wizard now offers to replace it instead of failing with raw JSON instructions.
    • Validate API key before registering: After confirming the sidecar is reachable via /health, the wizard now tests the /mcp endpoint with the provided Bearer token. If auth fails, the user is prompted to re-enter the correct key or cancel — preventing broken configs from being registered silently.

    Testing

    • 3 new tests for testAuth (correct key, wrong key, network error)
    • Total: 225 tests passing

    Full Changelog: https://git.bros.ninja/mike/open-project-sidecar-mcp/compare/v1.4.15-alpha...v1.4.17-alpha

    Downloads
  • v1.4.15-alpha ed5b0723c0

    v1.4.15-alpha
    All checks were successful
    CI / lint (push) Successful in 9s
    Publish / detect-release (push) Successful in 5s
    CI / security (push) Successful in 8s
    CI / test (push) Successful in 15s
    Publish / tag (push) Successful in 6s
    Publish / publish-forgejo (push) Successful in 10s
    Publish / publish-npm (push) Successful in 13s
    Publish / promote-release (push) Successful in 1s
    Publish / publish-container (push) Successful in 29s
    Pre-release

    Gravity Bot released this 2026-02-16 06:24:05 +00:00 | 84 commits to main since this release

    What's Changed

    • CI pipeline validation after runner config fix (--privileged in runner options)

    Refs OP#593

    Downloads
  • v1.4.14-alpha f00f417d97

    v1.4.14-alpha
    Some checks failed
    Publish / detect-release (push) Successful in 6s
    CI / lint (push) Successful in 10s
    CI / security (push) Successful in 10s
    Publish / tag (push) Successful in 4s
    CI / test (push) Successful in 15s
    Publish / publish-forgejo (push) Successful in 9s
    Publish / promote-release (push) Successful in 1s
    Publish / publish-npm (push) Successful in 9s
    Publish / publish-container (push) Failing after 39s
    Pre-release

    Gravity Bot released this 2026-02-16 06:09:33 +00:00 | 86 commits to main since this release

    What's Changed

    • Full CI pipeline validation release after infrastructure fixes
    • nginx upload limit increased to 10G for container image push
    • Updated NPM automation token with 2FA bypass
    • DinD privileged runner config confirmed working

    Infrastructure Fixes (not in code)

    • nginx: client_max_body_size 10G on git.bros.ninja reverse proxy
    • NPM token: granular access token with "Bypass 2FA for automation"
    • Runner config: container.privileged: true in act_runner config

    Refs OP#590

    Downloads
  • v1.4.13-alpha c0a40983ad

    v1.4.13-alpha
    Some checks failed
    Publish / detect-release (push) Successful in 7s
    CI / lint (push) Successful in 11s
    CI / security (push) Successful in 10s
    CI / test (push) Successful in 17s
    Publish / tag (push) Successful in 5s
    Publish / publish-forgejo (push) Successful in 9s
    Publish / publish-npm (push) Successful in 10s
    Publish / promote-release (push) Successful in 0s
    Publish / publish-container (push) Failing after 35s
    Pre-release

    Gravity Bot released this 2026-02-16 05:55:31 +00:00 | 88 commits to main since this release

    What Changed

    Test full CI pipeline with privileged runner config and updated NPM token.

    Install

    npm install open-project-sidecar-mcp@1.4.13-alpha
    
    Downloads
  • v1.4.12-alpha ba880c517b

    v1.4.12-alpha
    Some checks failed
    CI / security (push) Successful in 6s
    Publish / detect-release (push) Successful in 5s
    CI / lint (push) Successful in 8s
    Publish / tag (push) Successful in 3s
    CI / test (push) Successful in 15s
    Publish / publish-forgejo (push) Successful in 7s
    Publish / publish-npm (push) Failing after 9s
    Publish / promote-release (push) Successful in 2s
    Publish / publish-container (push) Failing after 41s
    Pre-release

    Mike Bros released this 2026-02-16 05:29:35 +00:00 | 90 commits to main since this release

    Downloads
  • v1.4.9-alpha 410a070f18

    v1.4.9-alpha
    All checks were successful
    CI / lint (pull_request) Successful in 7s
    CI / security (pull_request) Successful in 9s
    CI / test (pull_request) Successful in 15s
    Pre-release

    Gravity Bot released this 2026-02-16 05:01:45 +00:00 | 99 commits to main since this release

    What's Changed

    Security & Infrastructure

    • OP#565: Remove hardcoded npm token from repository — deleted .npmrc with exposed token, added to .gitignore
    • OP#566: Set up branch and tag protection on main — PRs required, 1 approval, v* tag protection
    • OP#567: Clean up 17 stale remote branches (12 feature, 5 release)
    • OP#569: Fix container image build — replace two-container DinD setup with single docker:dind container to eliminate DNS resolution failures in act_runner

    Skill Improvements (Claude Code tooling)

    • OP#570: Improve release skill UX — proactive context gathering and intent recognition
      • OP#571: Add automatic repo and OP state discovery on skill invocation
      • OP#572: Add planning-only intent recognition to release skill
    • OP#573: Enforce work package status transitions in openproject skill
      • OP#574: Add version-level kickoff workflow to openproject skill
      • OP#575: Add explicit status transition calls at each workflow step
      • OP#576: Add preflight sweep verification gate to prevent skipping
    • OP#577: Auto-generate and sync project wiki SOPs from skill definitions
      • OP#578: Define skill-to-SOP mapping and SOP templates
      • OP#579: Add SOP generation to project setup workflow
      • OP#580: Add SOP refresh mechanism triggered by skill updates

    Install

    # Forgejo registry
    npm install open-project-sidecar-mcp@1.4.9-alpha --registry=https://git.bros.ninja/api/packages/mike/npm/
    
    # npmjs.org
    npm install open-project-sidecar-mcp@1.4.9-alpha
    
    Downloads
  • v1.4.8-alpha e42002d501

    v1.4.8-alpha
    Some checks failed
    Publish / detect-release (push) Successful in 7s
    CI / lint (push) Successful in 10s
    CI / security (push) Successful in 9s
    CI / test (push) Successful in 14s
    Publish / tag (push) Successful in 7s
    Publish / publish-forgejo (push) Successful in 13s
    Publish / publish-npm (push) Successful in 10s
    Publish / promote-release (push) Successful in 1s
    Publish / publish-container (push) Failing after 4m56s
    Pre-release

    Gravity Bot released this 2026-02-16 03:32:48 +00:00 | 102 commits to main since this release

    What's Changed

    • OP#556: Fix CI container image builds — use node:18-alpine with docker-cli and Docker-in-Docker service for the publish-container job in Forgejo Actions

    This is a CI-only fix. The first release to successfully publish a Docker container image to the Forgejo registry.

    Install

    # npm (public)
    npx -y open-project-sidecar-mcp@1.4.8-alpha --setup
    
    # npm (Forgejo registry)
    npm install open-project-sidecar-mcp@1.4.8-alpha --registry=https://git.bros.ninja/api/packages/mike/npm/
    
    # Docker sidecar
    docker pull git.bros.ninja/mike/open-project-sidecar-mcp:1.4.8-alpha
    
    Downloads
  • v1.4.7-alpha 99e03381bf

    v1.4.7-alpha
    Some checks failed
    Publish / detect-release (push) Successful in 6s
    CI / lint (push) Successful in 11s
    CI / security (push) Successful in 11s
    Publish / tag (push) Successful in 4s
    CI / test (push) Successful in 17s
    Publish / publish-forgejo (push) Successful in 13s
    Publish / publish-npm (push) Successful in 12s
    Publish / publish-container (push) Failing after 14s
    Publish / promote-release (push) Successful in 5s
    Pre-release

    Gravity Bot released this 2026-02-16 03:27:41 +00:00 | 104 commits to main since this release

    What's Changed

    • OP#556: Fix CI container image builds — use Docker-in-Docker (docker:cli + docker:dind service) for the publish-container job in Forgejo Actions

    This is a CI-only fix. The first release to publish a Docker container image to the Forgejo registry.

    Install

    # npm (public)
    npx -y open-project-sidecar-mcp@1.4.7-alpha --setup
    
    # npm (Forgejo registry)
    npm install open-project-sidecar-mcp@1.4.7-alpha --registry=https://git.bros.ninja/api/packages/mike/npm/
    
    # Docker sidecar
    docker pull git.bros.ninja/mike/open-project-sidecar-mcp:1.4.7-alpha
    
    Downloads
  • v1.4.6-alpha b18ef4d7bc

    v1.4.6-alpha
    Some checks failed
    Publish / detect-release (push) Successful in 5s
    CI / security (push) Successful in 9s
    CI / lint (push) Successful in 10s
    Publish / tag (push) Successful in 5s
    CI / test (push) Successful in 17s
    Publish / publish-container (push) Failing after 4s
    Publish / publish-forgejo (push) Successful in 12s
    Publish / publish-npm (push) Successful in 11s
    Publish / promote-release (push) Successful in 1s
    Pre-release

    Gravity Bot released this 2026-02-16 03:14:27 +00:00 | 107 commits to main since this release

    What's Changed

    Input Sanitization (OP#531)

    • OP#532: Added zId, zNum, zNumRange, zIdArray coercion helpers that accept both strings and numbers
    • OP#533: Replaced all z.number() schemas with coercion helpers across all tools
    • OP#534: Improved parameter descriptions with cross-references and examples
    • OP#535: Added integration tests for coercion helpers in schema composition

    Wiki Draft Pages (OP#536)

    • OP#537OP#545: Created 8 comprehensive wiki pages (home, quick start, deployment modes, configuration, security, tool reference, admin command, troubleshooting)
    • Slimmed README from 482 to ~125 lines with summary tables linking to wiki drafts

    Docker Sidecar Fix (OP#547)

    • Setup wizard now uses published container image (git.bros.ninja/mike/open-project-sidecar-mcp:latest) instead of node:18-slim
    • Container image includes docker-cli for Rails-dependent tools (admin_command, wiki, boards, forums)
    • CI publishes container image alongside npm package on every release
    • Re-running --setup on existing sidecars auto-upgrades to the new image

    Rails Tools Audit (OP#548)

    • Audited 13 non-admin Rails tools for REST API migration feasibility
    • Wiki and forum APIs are stubs (GET only) — no migration possible
    • Boards has partial REST coverage — follow-up task OP#555 created in 1.5.0-alpha
    • Updated all 13 tool descriptions and documentation to mark Sidecar mode requirement

    Install

    # npm (public)
    npx -y open-project-sidecar-mcp@1.4.6-alpha --setup
    
    # npm (Forgejo registry)
    npm install open-project-sidecar-mcp@1.4.6-alpha --registry=https://git.bros.ninja/api/packages/mike/npm/
    
    # Docker sidecar
    docker pull git.bros.ninja/mike/open-project-sidecar-mcp:1.4.6-alpha
    
    Downloads