fix(mcp): support "streamable-http" transport for remote MCP servers … #17
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: GoReleaser | |
| on: | |
| push: | |
| tags: | |
| - "v*" | |
| permissions: | |
| contents: write | |
| id-token: write | |
| attestations: write | |
| jobs: | |
| release: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version-file: "go.mod" | |
| - name: Download dependencies | |
| run: go mod download | |
| - name: Run GoReleaser | |
| uses: goreleaser/goreleaser-action@v7 | |
| with: | |
| distribution: goreleaser | |
| version: "~> v2" | |
| args: release --clean | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Generate signed build provenance attestations | |
| uses: actions/attest-build-provenance@v4 | |
| with: | |
| subject-path: | | |
| dist/*.tar.gz | |
| dist/*.zip | |
| dist/*.txt | |
| - name: Mirror release assets to S3-compatible storage | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.MIRROR_S3_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.MIRROR_S3_SECRET_ACCESS_KEY }} | |
| AWS_DEFAULT_REGION: ${{ secrets.MIRROR_S3_REGION }} | |
| BUCKET: ${{ secrets.MIRROR_S3_BUCKET }} | |
| ENDPOINT: ${{ secrets.MIRROR_S3_ENDPOINT }} | |
| PREFIX: ${{ secrets.MIRROR_S3_PATH_PREFIX }} | |
| MIRROR_PUBLIC_URL: ${{ secrets.MIRROR_PUBLIC_URL }} | |
| VERSION: ${{ github.ref_name }} | |
| run: | | |
| set -eu | |
| if [ -z "${BUCKET:-}" ] || [ -z "${ENDPOINT:-}" ]; then | |
| echo "Mirror not configured (need MIRROR_S3_BUCKET + MIRROR_S3_ENDPOINT). Skipping." | |
| exit 0 | |
| fi | |
| # Aliyun OSS rejects path-style requests (SecondLevelDomainForbidden); | |
| # AWS CLI defaults to path-style for custom endpoints, so force | |
| # virtual-hosted style. Harmless for endpoints that accept either. | |
| aws configure set default.s3.addressing_style virtual | |
| # AWS CLI v2.23+ enabled default integrity protections that add | |
| # `aws-chunked` request encoding, which OSS rejects with | |
| # InvalidArgument. Restore the pre-2.23 behavior. | |
| aws configure set default.request_checksum_calculation when_required | |
| aws configure set default.response_checksum_validation when_required | |
| # Normalize PREFIX: strip both leading and trailing slashes so a | |
| # value of "/" or "/foo/" doesn't produce a doubled or leading slash | |
| # in the resulting key. | |
| PREFIX="${PREFIX#/}"; PREFIX="${PREFIX%/}" | |
| base="${PREFIX:+${PREFIX}/}releases/download/${VERSION}" | |
| uploaded=0 | |
| for f in dist/*.tar.gz dist/*.zip dist/checksums.txt; do | |
| [ -f "$f" ] || continue | |
| name=$(basename "$f") | |
| echo "Uploading $f -> s3://${BUCKET}/${base}/${name}" | |
| aws --endpoint-url="$ENDPOINT" s3 cp "$f" "s3://${BUCKET}/${base}/${name}" \ | |
| --cache-control "public, max-age=31536000, immutable" | |
| uploaded=$((uploaded + 1)) | |
| done | |
| if [ "$uploaded" -eq 0 ]; then | |
| echo "No release artifacts found in dist/ — refusing to update latest pointer." | |
| exit 1 | |
| fi | |
| # Production-facing pointers — mutated ONLY by stable releases. | |
| # | |
| # A pre-release tag (v1.2.3-rc.1, -beta, -alpha, -pre) publishes its | |
| # versioned artifacts under releases/download/<tag>/ but MUST NOT touch | |
| # anything existing BYOC runners or fresh `curl install.sh | sh` installs | |
| # resolve at runtime: neither the 'latest' pointer (install.sh | |
| # resolve_version) nor the served install.sh itself. This lets a preview | |
| # build be cut from an unmerged branch without pulling production onto it | |
| # or shipping an unreviewed installer. | |
| case "$VERSION" in | |
| *-rc*|*-beta*|*-alpha*|*-pre*) | |
| echo "Pre-release $VERSION: versioned artifacts uploaded; 'latest' pointer and served install.sh left untouched." ;; | |
| *) | |
| # Latest pointer used by install.sh resolve_version when MIRROR_URL | |
| # is set. Updated before install.sh so a partial run never advertises | |
| # a version whose installer hasn't been refreshed. | |
| latest_key="${PREFIX:+${PREFIX}/}releases/latest" | |
| printf '%s\n' "$VERSION" > /tmp/latest | |
| aws --endpoint-url="$ENDPOINT" s3 cp /tmp/latest "s3://${BUCKET}/${latest_key}" \ | |
| --cache-control "public, max-age=60" \ | |
| --content-type "text/plain; charset=utf-8" | |
| # Refresh install.sh on every stable release so the mirror never | |
| # ships a stale/missing installer (install-sh.yml only fires when | |
| # install.sh changes on main; the script is version-agnostic, so | |
| # re-uploading the current copy here is the belt-and-suspenders | |
| # guarantee). Bake the CDN as the default MIRROR_URL into the served | |
| # copy so `curl <cdn>/install.sh | sh` needs no MIRROR_URL; the repo | |
| # / GitHub copy stays GitHub-default. | |
| src=install.sh | |
| if [ -n "${MIRROR_PUBLIC_URL:-}" ]; then | |
| pub="${MIRROR_PUBLIC_URL%/}${PREFIX:+/${PREFIX}}" | |
| sed "s#: \"\${MIRROR_URL:=}\"#: \"\${MIRROR_URL:=${pub}}\"#" install.sh > /tmp/install.sh | |
| grep -q "MIRROR_URL:=${pub}" /tmp/install.sh || { echo "ERROR: MIRROR_URL default not injected (install.sh default line changed?)" >&2; exit 1; } | |
| src=/tmp/install.sh | |
| fi | |
| sh_key="${PREFIX:+${PREFIX}/}install.sh" | |
| aws --endpoint-url="$ENDPOINT" s3 cp "$src" "s3://${BUCKET}/${sh_key}" \ | |
| --cache-control "public, max-age=300" \ | |
| --content-type "text/x-shellscript; charset=utf-8" ;; | |
| esac |