Skip to content

build(deps): Bump mcp-contextforge-gateway from 1.0.0rc1 to 1.0.7 - #35

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/mcp-contextforge-gateway-1.0.7
Open

build(deps): Bump mcp-contextforge-gateway from 1.0.0rc1 to 1.0.7#35
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/mcp-contextforge-gateway-1.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps mcp-contextforge-gateway from 1.0.0rc1 to 1.0.7.

Release notes

Sourced from mcp-contextforge-gateway's releases.

v1.0.7 - Release Security Hardening, Unified Search, OAuth Improvements, Dataplane Enhancements, and Operational Reliability

[1.0.7] - 2026-08-04 - Security Hardening, Unified Search, OAuth Improvements, Dataplane Enhancements, and Operational Reliability

Overview

Release 1.0.7 consolidates 57 PRs focused on security hardening, unified search and catalog APIs, OAuth and CSRF improvements, dataplane publishing, CPEX control-execution telemetry, MCP Apps compatibility, and CI/operational reliability:

  • Security - Root URI policy hardening, token-scope enforcement, safer admin demotion, A2A authorization, REST outbound validation, CSRF response correctness, and patched container dependencies.
  • API & Platform - Added v1 catalog and unified search endpoints, bulk team member creation, popup-based OAuth authorization, GatewayRead counts, and improved OAuth resource handling.
  • Dataplane & MCP - Added per-backend header publication, opaque dataplane subject IDs, session-token identity resolution, and deprecated MCP Apps metadata compatibility.
  • Observability & Plugins - Added CPEX control-execution telemetry and improved upstream MCP session diagnostics; replaced the in-tree SQL sanitizer with the maintained CPEX plugin.
  • Operations - Improved Redis session recovery and connection handling, health-check recovery, s390x builds, production smoke checks, dependency security, and developer tooling.

Breaking Changes

  • Unconditional weak-secret rejection - JWT_SECRET_KEY placeholder and known-weak values now cause SecurityConfigurationError at startup in every environment, including development. The __REPLACE_ME__ placeholder value is always rejected and will block startup. Update the JWT_SECRET_KEY manually to a strong secret (length > 32).

  • Root URI policy now defaults to deny (internal#294) - Set ROOT_ALLOWED_SCHEMES before restart for every network scheme used by DEFAULT_ROOTS or new root registrations. file:// roots additionally require ROOT_ALLOW_FILE_SCHEME=true and non-empty ROOT_ALLOWED_FILE_PREFIXES. Invalid DEFAULT_ROOTS abort gateway startup; configure policy before upgrading, not after.

    • Root management API payloads are strict - POST /roots rejects unknown fields. PUT /roots/{root_uri} accepts only optional name; existing full-root PUT payloads containing uri, _meta, or custom fields now return HTTP 422.
    • Root-inclusive exports require unrestricted platform administration - Unfiltered export includes roots and returns HTTP 403 for team-scoped administrators. Run backup exports with unrestricted platform-admin credentials, or explicitly exclude roots when a scoped export is intended.
    • Root registrations are runtime state - Roots are held in memory and are not database-persisted. Manual registrations do not survive process restart; configure DEFAULT_ROOTS together with matching root policy when persistent startup roots are required.

  • OAuth DCR endpoints now enforce un-narrowed admin scope (internal#460) - GET /oauth/registered-clients, GET /oauth/registered-clients/{gateway_id}, and DELETE /oauth/registered-clients/{client_id} now reject narrowed and public-only admin tokens with 403 Forbidden.

Security

  • Fixed SSRF vulnerability in url_to_markdown_server MCP server (CWE-918), including DNS-rebinding protection through connection pinning and configurable allowlisting.
  • API token scope enforcement (#4737) - Enforced scope-based access control for API tokens.
  • Search Token Scoping (#5668) - Applied token-scoped team filtering to unified search results for administrators.
  • Safe admin demotion (#5644) - Enforced safe rules when demoting administrators.
  • A2A admin edit authorization (#5922) - Hardened authorization for A2A administrative edits.
  • REST outbound validation (#5925) - Hardened validation of outbound REST tool requests.
  • Patched libpq dependency (#5809) - Bumped UBI_MINIMAL to include the patched libpq.

Added

API & Platform

  • v1 Catalog API (#5544) - Added the v1 catalog API.
  • Unified Search API (#5610) - Added versioned GET /v1/search unified search endpoint.
  • Bulk Team Member Creation (#5626) - Added bulk member creation support to TeamCreateRequest.
  • Popup-Based OAuth Authorization (#5661) - Added popup authorization support with CSP-nonce'd postMessage responses for success and error paths.
  • Gateway Counts (#5657) - Added prompt and resource counts to GatewayRead.

Dataplane & Observability

  • Per-Backend Header Publication (#5924) - Published per-backend add_headers and remove_headers configuration.
  • CPEX Control-Execution Telemetry (#6003) - Added structured per-plugin enforcement observability on tool invocations. Requires CPEX >= 0.1.2 and is a silent no-op on older builds. Added cpex.control.summary and cpex.control.result spans, configurable result flattening and limits, attribute policies, and optional reason and agent-id emission.
  • Upstream MCP Session Diagnostics (#5631) - Improved diagnostics for upstream MCP session errors.

... (truncated)

Changelog

Sourced from mcp-contextforge-gateway's changelog.

[1.0.7] - 2026-08-04 - Security Hardening, Unified Search, OAuth Improvements, Dataplane Enhancements, and Operational Reliability

Overview

Release 1.0.7 consolidates 57 PRs focused on security hardening, unified search and catalog APIs, OAuth and CSRF improvements, dataplane publishing, CPEX control-execution telemetry, MCP Apps compatibility, and CI/operational reliability:

  • Security - Root URI policy hardening, token-scope enforcement, safer admin demotion, A2A authorization, REST outbound validation, CSRF response correctness, and patched container dependencies.
  • API & Platform - Added v1 catalog and unified search endpoints, bulk team member creation, popup-based OAuth authorization, GatewayRead counts, and improved OAuth resource handling.
  • Dataplane & MCP - Added per-backend header publication, opaque dataplane subject IDs, session-token identity resolution, and deprecated MCP Apps metadata compatibility.
  • Observability & Plugins - Added CPEX control-execution telemetry and improved upstream MCP session diagnostics; replaced the in-tree SQL sanitizer with the maintained CPEX plugin.
  • Operations - Improved Redis session recovery and connection handling, health-check recovery, s390x builds, production smoke checks, dependency security, and developer tooling.

Breaking Changes

  • Unconditional weak-secret rejection - JWT_SECRET_KEY placeholder and known-weak values now cause SecurityConfigurationError at startup in every environment, including development. The __REPLACE_ME__ placeholder value is always rejected and will block startup. Update the JWT_SECRET_KEY manually to a strong secret (length > 32).

  • Root URI policy now defaults to deny (internal#294) - Set ROOT_ALLOWED_SCHEMES before restart for every network scheme used by DEFAULT_ROOTS or new root registrations. file:// roots additionally require ROOT_ALLOW_FILE_SCHEME=true and non-empty ROOT_ALLOWED_FILE_PREFIXES. Invalid DEFAULT_ROOTS abort gateway startup; configure policy before upgrading, not after.

    • Root management API payloads are strict - POST /roots rejects unknown fields. PUT /roots/{root_uri} accepts only optional name; existing full-root PUT payloads containing uri, _meta, or custom fields now return HTTP 422.
    • Root-inclusive exports require unrestricted platform administration - Unfiltered export includes roots and returns HTTP 403 for team-scoped administrators. Run backup exports with unrestricted platform-admin credentials, or explicitly exclude roots when a scoped export is intended.
    • Root registrations are runtime state - Roots are held in memory and are not database-persisted. Manual registrations do not survive process restart; configure DEFAULT_ROOTS together with matching root policy when persistent startup roots are required.

  • OAuth DCR endpoints now enforce un-narrowed admin scope (internal#460) - GET /oauth/registered-clients, GET /oauth/registered-clients/{gateway_id}, and DELETE /oauth/registered-clients/{client_id} now reject narrowed and public-only admin tokens with 403 Forbidden.

Security

  • Fixed SSRF vulnerability in url_to_markdown_server MCP server (CWE-918), including DNS-rebinding protection through connection pinning and configurable allowlisting.
  • API token scope enforcement (#4737) - Enforced scope-based access control for API tokens.
  • Search Token Scoping (#5668) - Applied token-scoped team filtering to unified search results for administrators.
  • Safe admin demotion (#5644) - Enforced safe rules when demoting administrators.
  • A2A admin edit authorization (#5922) - Hardened authorization for A2A administrative edits.
  • REST outbound validation (#5925) - Hardened validation of outbound REST tool requests.
  • Patched libpq dependency (#5809) - Bumped UBI_MINIMAL to include the patched libpq.

Added

API & Platform

  • v1 Catalog API (#5544) - Added the v1 catalog API.
  • Unified Search API (#5610) - Added versioned GET /v1/search unified search endpoint.
  • Bulk Team Member Creation (#5626) - Added bulk member creation support to TeamCreateRequest.
  • Popup-Based OAuth Authorization (#5661) - Added popup authorization support with CSP-nonce'd postMessage responses for success and error paths.
  • Gateway Counts (#5657) - Added prompt and resource counts to GatewayRead.

Dataplane & Observability

  • Per-Backend Header Publication (#5924) - Published per-backend add_headers and remove_headers configuration.
  • CPEX Control-Execution Telemetry (#6003) - Added structured per-plugin enforcement observability on tool invocations. Requires CPEX >= 0.1.2 and is a silent no-op on older builds. Added cpex.control.summary and cpex.control.result spans, configurable result flattening and limits, attribute policies, and optional reason and agent-id emission.
  • Upstream MCP Session Diagnostics (#5631) - Improved diagnostics for upstream MCP session errors.

Removed

... (truncated)

Commits
  • 4092d33 Release 1.0.7 (#6039)
  • 7c042d2 feat: consume Cpex control execution records (#6003)
  • db8acbc docs: update architecture roadmap and add release history (#6037)
  • e891128 fix(db): remove blocking unique constraint for multi-user DCR clients (#5198)
  • 72eea5f chore: bump cryptography to 50.0.0 (#6035)
  • f21b61c Merge commit from fork
  • e77f25d Fix: Enforce API Token Scope-Based Access Control (#4737)
  • a48826b feat(api): add prompt and resource counts to GatewayRead (#5657)
  • a27a3f7 refactor(middleware): extract auth-context middleware registration into testa...
  • 7dab401 Follow-on refinements to Docker Security Scan job (#5438)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
build(deps): Bump mcp-contextforge-gateway from 1.0.0rc1 to 1.0.7
7b51458 
Bumps [mcp-contextforge-gateway](https://github.com/IBM/mcp-context-forge) from 1.0.0rc1 to 1.0.7.
- [Release notes](https://github.com/IBM/mcp-context-forge/releases)
- [Changelog](https://github.com/IBM/mcp-context-forge/blob/main/CHANGELOG.md)
- [Commits](IBM/mcp-context-forge@v1.0.0-RC1...v1.0.7)

---
updated-dependencies:
- dependency-name: mcp-contextforge-gateway
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 10, 2026
@dependabot dependabot Bot mentioned this pull request Aug 10, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants