Changelog

July 15, 2025 · View on GitHub

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

2.0.0 (2025-07-15)

⚠ BREAKING CHANGES

  • Major security hardening with critical vulnerability fixes
  • This commit introduces breaking changes.
  • This commit introduces breaking changes.

Features

  • Add advanced configuration parameters to setup guide (24dcef2)
  • Add automated release workflow and documentation (53b27d4)
  • Add Gemini MCP slash commands (62eedb4)
  • Add MIT License and update README (fea99a5)
  • Add script to set up the development environment (52943fb)
  • Add slash commands for Gemini MCP integration (bf333c7)
  • add standalone helper CLI documentation to setup guide (9092906)
  • Enhance Gemini MCP integration with slash commands (5d1b811)
  • implement comprehensive testing and CI/CD infrastructure (35b1499)
  • implement comprehensive testing infrastructure with hang prevention (915fcd4)
  • Implement shared MCP setup and enhanced configuration (00653af)
  • Implement slim Gemini CLI integration via MCP server (5b2b85d)
  • Implement Slim Gemini CLI MCP server with streaming and API integration (2302889)
  • Implements comprehensive testing infrastructure and development workflow for production-ready MCP server. (5ca93ba)
  • Introduce new Slim Gemini CLI MCP server with streaming and API integration (5634b73)
  • Release v1.0.0 - Security Hardened Production Version (2c77cf5)
  • remove integration tests and outdated MCP server tests (02ec503)
  • Run pytest in a virtual environment (6641920)

Bug Fixes

  • adjust coverage requirements and pytest configuration (75d2e89)
  • configure release please to use existing changelog path (1a9c476)
  • correct indentation and add issue write permission to release workflow (0fa2c79)
  • correct indentation of comment in test workflow failure check (8970719)
  • correct release-please manifest to match actual current version (1.3.1) (240f340)
  • correct yaml syntax error in test workflow (b317995)
  • enhance anti-markdown prompts for better terminal output (f39f5f7)
  • Pass GOOGLE_CLOUD_PROJECT env var to Gemini CLI subprocess (74f5e99)
  • Pass GOOGLE_CLOUD_PROJECT env var to Gemini CLI subprocess (bdd0eed)
  • resolve code formatting issues with black formatter (dd36c3a)
  • security: Fix PYTHONPATH for security and hardening tests (a9c61e5)

Documentation

  • add claude.md and tasks.json to .gitignore (c057b16)
  • add concise code comments guideline to README (4f4d202)
  • Add credits section to README for tools used (5ae9190)
  • add detailed contribution guidelines to README (4392ff9)
  • Add development setup instructions to README (50b7c2e)
  • add Google API key requirement to setup instructions (dcb53bb)
  • Add note emphasizing API key replacement in setup guide (d233ab9)
  • Add setup and slash commands guide links to README (8de56f7)
  • Clarify virtual environment path in setup guide (34f0f8a)
  • Comprehensive documentation update for Gemini MCP integration (11a5ee2)
  • Document symlink setup for automated hooks (064f1c0)
  • expand hook setup guide to include slash command configuration (5619f86)
  • fix formatting in README.md (b640e38)
  • remove unnecessary bold formatting in setup documentation (c72ee9f)
  • Reorganize documentation structure (2c346c5)
  • Revise SETUP guide for clarity and improved structure (aec407b)
  • specify global and project-specific Claude configuration file locations (3b07dab)
  • update API key reference from Google to Gemini in setup guide (12ea373)
  • update project description to focus on Claude Code integration with Gemini (0efe6cd)
  • Update README and SETUP guide for Claude Code hooks (2c026d1)
  • Update README and SETUP guide with minor corrections (7308615)
  • Update README with badges for version, security, license, etc. (cfbf5b5)
  • Update README.md to reflect version 1.3.0 and major changes (9ccd5df)

Testing

  • add test file for hook testing (65948f7)

CI/CD

  • add coverage XML path config for PR coverage report workflow (a4d7d0e)

[1.3.1] - 2025-07-15

Fixed

  • E2E Test Async Mocking Issues - Fixed critical async mocking problems that were causing CI failures
  • Resolved "MagicMock can't be used in await expression" Error - Properly configured async function mocking using AsyncMock and side_effect parameters
  • Improved Test Reliability - All E2E tests now pass consistently when TEST_WITH_REAL_API=true and TEST_GOOGLE_API_KEY is set

Technical Improvements

  • Added proper async mocking with AsyncMock import for better async function testing
  • Updated test_real_quick_query to use proper async mock with side_effect parameter
  • Updated test_real_code_analysis to mock API response about performance issues
  • Updated test_real_api_rate_limiting to mock varied API responses for concurrent requests
  • Applied pytest-asyncio best practices for async test mocking based on official documentation

Testing

  • All 75 tests pass with 3 properly skipped (as expected)
  • Fixed the specific CI failure that was blocking deployments
  • Maintained test isolation and proper cleanup across all test suites

[1.3.0] - 2025-07-15

Added

  • Comprehensive Testing Suite - 1,540+ lines of unit, integration, and end-to-end tests with timeout protection
  • CI/CD Pipeline - 3 GitHub Actions workflows for automated testing, security scanning, and dependency checks
  • Multi-Environment Support - Python 3.10-3.12 compatibility testing
  • Development Workflow - Pre-commit hooks, Makefile automation, and setup script
  • Code Quality Tools - MyPy type checking, Black/isort formatting, and coverage reporting

Security

  • Bandit Integration - Automated security scanning with custom configuration
  • GitLeaks Integration - Secret detection and prevention in codebase
  • Custom Hardening Tests - Additional security validation beyond standard tools
  • Enhanced Error Handling - Improved MCP server robustness and security

Testing Infrastructure

  • Unit Tests - Core functionality testing with mocked dependencies
  • Integration Tests - API and CLI fallback testing with real interactions
  • End-to-End Tests - Full workflow validation including MCP server operations
  • Security Tests - Vulnerability scanning and hardening validation
  • Timeout Protection - Prevents hanging tests in CI/CD environments

Development Improvements

  • Automated Setup - One-command development environment setup (./setup-dev.sh)
  • Pre-commit Hooks - Automatic code quality checks before commits
  • Makefile Commands - Streamlined development workflow automation
  • Enhanced Documentation - Updated testing, setup, and security guides

Changed

  • Project Structure - 40 files changed with 5,536 lines added and 1,012 removed
  • Reorganized test structure with proper separation of concerns
  • Enhanced project configuration with pyproject.toml
  • Improved dependency management with development requirements

Potentially Breaking Changes

  • Updated minimum Python version requirements (backward compatibility maintained)
  • Reorganized project structure for better maintainability
  • Enhanced development setup process (existing setups continue to work)

Verification

  • All tests pass across Python 3.10-3.12
  • Security scans pass with zero critical vulnerabilities
  • Type checking passes with MyPy
  • Code formatting enforced with Black/isort
  • Existing installations continue to work without changes

[1.2.0] - 2025-07-14

Added

  • Enhanced Documentation Structure - Improved README with table of contents and architecture overview
  • Streamlined User Experience - Better organization of setup and usage instructions
  • Improved Issue Reporting - Added detailed guidance for submitting issues with labels

Documentation

  • Added comprehensive architecture diagrams and explanations
  • Restructured documentation for better navigation and user experience
  • Enhanced "Need Help?" section with better issue submission guidance
  • Added link to GitHub labels for better issue categorization

[1.1.0] - 2025-07-14

Added

  • Streamlined Slash Commands - Simplified implementation with individual command files
  • Enhanced Command Organization - Individual markdown files for each command in .claude/commands/
  • Better Documentation - Comprehensive slash commands guide with examples

Slash Commands Added

  • Core: /gemini, /g, /analyze, /a, /codebase, /c
  • Focus: /security, /s, /performance, /p, /architecture, /arch
  • Assistance: /explain, /e, /debug, /d, /review, /r, /research
  • Improvement: /optimize, /test, /fix
  • Utilities: /help, /status, /models

Changed

  • Improved Command Structure - Removed legacy slash_commands.py and slash-commands.json in favor of modular approach

Technical Improvements

  • Modular command architecture for easier maintenance and updates
  • Direct markdown-based command definitions
  • Simplified implementation with reduced dependencies
  • Improved error handling with helpful messages and usage hints

[1.0.0] - 2025-07-12

Added

  • Complete MCP server implementation with three core tools
  • Smart model selection (Gemini Flash for speed, Pro for depth)
  • Real-time streaming output with progress indicators
  • Shared MCP architecture supporting multiple AI clients
  • API-first approach with CLI fallback
  • Comprehensive hook system for automated workflows

Security

  • CRITICAL: Fixed command injection vulnerabilities (CWE-78)
  • CRITICAL: Fixed path traversal vulnerabilities (CWE-22)
  • CRITICAL: Fixed prompt injection vulnerabilities (CWE-94)
  • CRITICAL: Fixed secrets exposure issues (CWE-200)
  • CRITICAL: Enhanced input validation (CWE-20)
  • Implemented defense-in-depth security architecture
  • Added comprehensive security testing suite
  • Created detailed security documentation

Technical Improvements

  • Replaced all shell=True usage with secure subprocess execution
  • Added path validation and directory boundary enforcement
  • Implemented input sanitization for all user inputs
  • Added API key redaction in error handling
  • Enhanced error handling with fail-safe defaults
  • Optimized for production deployment

Documentation

  • Complete setup guide with 5-minute quick start
  • Comprehensive security documentation
  • Architecture diagrams and code examples
  • Troubleshooting guides and best practices
  • Professional deployment patterns

Breaking Changes

  • Removed vulnerable test files and insecure code patterns
  • Enhanced security may reject previously accepted inputs
  • File access restricted to current directory tree only

Pre-1.0.0 Development Versions

Initial Development (July 10-12, 2025)

  • Initial MCP server prototype (July 10)
  • Basic Gemini CLI integration (July 10-11)
  • Experimental hook implementations (July 11)
  • Security vulnerability identification and analysis (July 11-12)

Note: Versions prior to 1.0.0 contained critical security vulnerabilities and should not be used in production environments.

Legend

  • Added for new features
  • Changed for changes in existing functionality
  • Deprecated for soon-to-be removed features
  • Removed for now removed features
  • Fixed for any bug fixes
  • Security for vulnerability fixes