ci: gate releases on CI passing

.beads/issues.jsonl

@@ -6,6 +6,7 @@
 {"id":"efficient-gitlab-mcp-b50","title":"Create server.json for MCP Registry","description":"Create server.json metadata file with environment variables","status":"closed","priority":2,"issue_type":"task","created_at":"2025-12-29T12:50:04.053915+01:00","updated_at":"2025-12-29T12:50:38.353663+01:00","closed_at":"2025-12-29T12:50:38.353663+01:00","close_reason":"Completed","dependencies":[{"issue_id":"efficient-gitlab-mcp-b50","depends_on_id":"efficient-gitlab-mcp-6am","type":"blocks","created_at":"2025-12-29T12:50:04.064925+01:00","created_by":"daemon"}]}
 {"id":"efficient-gitlab-mcp-fbp","title":"Add DNS rebinding protection for HTTP transport","description":"When using StreamableHTTPServerTransport, enable DNS rebinding protection for security:\n\n```typescript\nnew StreamableHTTPServerTransport({\n  enableDnsRebindingProtection: true,\n  allowedHosts: ['localhost', '127.0.0.1'],\n  allowedOrigins: ['http://localhost:3000']\n});\n```\n\nThis prevents malicious websites from making requests to the local MCP server.","status":"closed","priority":3,"issue_type":"task","created_at":"2025-12-24T16:20:34.579748+01:00","updated_at":"2025-12-24T16:38:33.572059+01:00","closed_at":"2025-12-24T16:38:33.572059+01:00","close_reason":"Added DNS rebinding protection with configurable allowedHosts and allowedOrigins","labels":["http-transport","mcp-sdk","security"]}
 {"id":"efficient-gitlab-mcp-h2f","title":"Add mcpName to package.json","description":"Add mcpName property for MCP Registry verification","status":"closed","priority":2,"issue_type":"task","created_at":"2025-12-29T12:50:02.981651+01:00","updated_at":"2025-12-29T12:50:20.779683+01:00","closed_at":"2025-12-29T12:50:20.779683+01:00","close_reason":"Completed","dependencies":[{"issue_id":"efficient-gitlab-mcp-h2f","depends_on_id":"efficient-gitlab-mcp-6am","type":"blocks","created_at":"2025-12-29T12:50:02.987921+01:00","created_by":"daemon"}]}
+{"id":"efficient-gitlab-mcp-oeo","title":"Gate releases on CI passing","description":"Currently release.yml and ci.yml both trigger on push to main in parallel. This means a broken commit could publish to npm/MCP Registry before CI catches the failure. We should make release.yml depend on CI passing first.","status":"in_progress","priority":1,"issue_type":"task","created_at":"2025-12-30T09:59:54.938183+01:00","updated_at":"2025-12-30T09:59:58.122494+01:00"}
 {"id":"efficient-gitlab-mcp-pnt","title":"Submit efficient-gitlab-mcp to PulseMCP.com","description":"Submit the MCP server to pulsemcp.com for discovery. Include proper description, features, and installation instructions.","status":"closed","priority":2,"issue_type":"task","created_at":"2025-12-24T18:38:29.914713+01:00","updated_at":"2025-12-26T18:56:28.676726+01:00","closed_at":"2025-12-26T18:56:28.676726+01:00","close_reason":"Completed","labels":["marketing","publishing"]}
 {"id":"efficient-gitlab-mcp-tgh","title":"Add MCP integration tests using InMemoryTransport","description":"The MCP SDK provides InMemoryTransport for testing servers without network overhead. We should add integration tests that test the full MCP server flow (tool discovery, schema retrieval, execution) rather than just our registry logic.\n\nUse InMemoryTransport.createLinkedPair() to create client/server transports and test:\n- Server initialization and capability negotiation\n- list_categories meta-tool via MCP protocol\n- list_tools meta-tool via MCP protocol\n- get_tool_schema meta-tool via MCP protocol\n- execute_tool meta-tool via MCP protocol (with mocked GitLab API)","status":"closed","priority":2,"issue_type":"task","created_at":"2025-12-24T16:20:25.787034+01:00","updated_at":"2025-12-24T16:27:19.817745+01:00","closed_at":"2025-12-24T16:27:19.817745+01:00","close_reason":"Added 14 MCP integration tests using InMemoryTransport","labels":["mcp-sdk","testing"]}
 {"id":"efficient-gitlab-mcp-xkh","title":"Add notification debouncing for HTTP transport","description":"The MCP SDK supports notification debouncing to coalesce multiple rapid notifications into a single message. This is useful when tools are registered/updated in quick succession.\n\nEnable debouncing in McpServer options to improve HTTP transport efficiency.","status":"closed","priority":3,"issue_type":"task","created_at":"2025-12-24T16:20:40.464231+01:00","updated_at":"2025-12-24T16:38:35.376261+01:00","closed_at":"2025-12-24T16:38:35.376261+01:00","close_reason":"Notification debouncing is handled by the SDK's StreamableHTTPServerTransport internally","labels":["http-transport","mcp-sdk","performance"]}

.github/workflows/release.yml

@@ -1,9 +1,10 @@
 name: Release
 
 on:
-  push:
-    branches:
-      - main
+  workflow_run:
+    workflows: ["CI"]
+    branches: [main]
+    types: [completed]
   workflow_dispatch:
 
 permissions:
@@ -13,5 +14,6 @@ permissions:
 
 jobs:
   release:
+    if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
     uses: detailobsessed/ci-components/.github/workflows/semantic-release-bun.yml@main
     secrets: inherit