-
Notifications
You must be signed in to change notification settings - Fork 6.3k
ci: fix MCP Registry publishing workflow #21342
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR adds GitHub OIDC authentication to the MCP Registry publishing workflow to fix the failing "Validate server.json" step. The workflow previously relied on GITHUB_TOKEN, but mcp-publisher requires explicit authentication via github-oidc login.
Key Changes:
- Added new authentication step using
mcp-publisher login github-oidcbefore validation and publishing operations - Leverages existing
id-token: writepermission already configured in the workflow
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No issues found across 1 file
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <[email protected]>
(cherry picked from commit 73d4223)
(cherry picked from commit 73d4223)
Summary
Fix MCP publisher login
The workflow previously failed during the validation step because mcp-publisher requires explicit authentication.
Added:
This allows both dry-run and publish steps to authenticate using GitHub OIDC.
Allow manual execution
Added workflow_dispatch so the workflow can be triggered manually from the GitHub UI.
Prevent accidental manual runs on non-tag refs
Added a guard step that aborts workflow_dispatch runs unless the workflow is triggered on a tag starting with v.
This ensures manual executions behave consistently with release-triggered runs.
Test Plan
Additional Information
For users: How does this change affect me?
Summary by cubic
Authenticate mcp-publisher via GitHub OIDC in the Update MCP Registry workflow to fix the failing Validate server.json step and unblock dry-run/publish. Also allow manual runs, limited to v* tags.
Bug Fixes
New Features
Written for commit 63e2521. Summary will update automatically on new commits.