chore: release v0.9.1

Author: iFurySt

.github/workflows/publish-helm-chart.yml

@@ -34,7 +34,7 @@ jobs:
         run: |
           cd chart-repo
           cp ../packaged/*.tgz ./
-          helm repo index . --url https://amoylba.github.io/unla-helm-charts --merge index.yaml || true
+          helm repo index . --url https://amoylab.github.io/unla-helm-charts --merge index.yaml || true
 
       - name: Commit and push
         run: |

.github/workflows/test.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20.18.0'
+          node-version: '22.12.0'
 
       - name: Install pnpm
         run: npm install -g pnpm@9.15.0

changelog/v0.9.1.md

@@ -0,0 +1,111 @@
+# 📦 Unla v0.9.1
+
+> Turn your MCP Servers and APIs into MCP endpoints — effortlessly, without modifying the original code.
+
+## ✨ 特性
+
+- Gateway 视图模式持久化至本地存储
+- 添加 Gateway 服务基础 URL 配置
+- 新增内部网络白名单功能，默认阻止工具访问并支持配置允许的目标
+- 添加完整的 Prometheus 指标支持（MCP API 请求指标、状态码、工具执行时间等）
+- 增强追踪捕获能力，支持无限长度选项和完整响应追踪
+- 集成 Sprig 模板函数库，扩展模板能力
+- OAuth2 授权码流程新增 PKCE 支持，提升安全性
+- 加强 JWT 服务初始化和错误处理
+- 改进 auth code grant，增加过期检查和特定错误提示
+- 新增繁体中文文档和 README 徽章
+
+## 🐞 修复
+
+- 修复工具端点渲染中的路径参数转义，防止路径遍历攻击
+- 修复工具执行失败时的响应错误
+- 升级 crypto 依赖至 v0.43.0
+- 升级 quic-go 依赖至 v0.54.1
+
+## 🧹 重构
+
+- 使用 Redis Streams 替代 Pub/Sub，实现更可靠的多实例信号传递
+- 统一对齐环境变量前缀
+- 优化追踪 ID 打印输出
+
+## 🧪 测试
+
+- 新增单元测试，提升代码覆盖率
+- 增强 safeGet、logger 和追踪功能的测试覆盖
+- 增加 JWT 密钥长度并添加 AuthConfig 测试
+
+## 🔧 其他
+
+- 更新 GitHub Actions 工作流配置
+- 升级项目依赖至最新次要版本
+- 添加缺失的配置和环境变量
+- 优化 .dockerignore 配置
+- 默认禁用 metrics，按需启用
+
+---
+
+📘 文档：https://docs.unla.amoylab.com/
+🐙 源码：https://github.com/amoylab/unla
+🐳 Docker 镜像：`ghcr.io/amoylab/unla/allinone:latest`
+💬 加入我们的 Discord 社区参与讨论：https://discord.gg/udf69cT9TY
+🔗 扫描下方二维码加入社区微信群，备注：`unla`
+<img src="https://github.com/amoylab/unla/blob/main/web/public/wechat-qrcode.png" alt="微信群二维码" width="350" height="350" />
+
+---
+
+感谢所有参与和关注该项目的开发者与用户 💖
+
+---
+
+## ✨ Features
+
+- Persist gateway view mode to local storage
+- Add gateway service base URL configuration
+- Add internal network allowlist enforcement to block tool access by default and permit configured targets
+- Add comprehensive Prometheus metrics support (MCP API request metrics, status codes, tool execution timing, etc.)
+- Enhance trace capture with unlimited length option and full response tracing
+- Integrate Sprig template function library for extended template capabilities
+- Add PKCE support to OAuth2 authorization code flow for enhanced security
+- Strengthen JWT service initialization and error handling
+- Improve auth code grant with expiry checks and specific error messages
+- Add Traditional Chinese documentation and README badge
+
+## 🐞 Fixes
+
+- Escape path parameters in tool endpoint rendering to prevent path traversal attacks
+- Fix response error when tool execution fails
+- Update crypto to v0.43.0
+- Update quic-go to v0.54.1
+
+## 🧹 Refactor
+
+- Use Redis Streams instead of Pub/Sub for reliable multi-instance signal delivery
+- Align environment variable prefixes
+- Improve trace ID printing output
+
+## 🧪 Tests
+
+- Add unit tests to improve code coverage
+- Enhance test coverage for safeGet, logger, and tracing functionality
+- Increase JWT secret length and add AuthConfig tests
+
+## 🔧 Miscellaneous
+
+- Update GitHub Actions workflow for tests
+- Upgrade dependencies to latest minor versions
+- Add missing configurations and environment variables
+- Optimize .dockerignore configuration
+- Disable metrics by default, enable on demand
+
+---
+
+📘 Docs: https://docs.unla.amoylab.com/
+🐙 Source: https://github.com/amoylab/unla
+🐳 Docker Image: `ghcr.io/amoylab/unla/allinone:latest`
+💬 Join our Discord community: https://discord.gg/udf69cT9TY
+🔗 Scan to join WeChat group, note: `unla`
+<img src="https://github.com/amoylab/unla/blob/main/web/public/wechat-qrcode.png" alt="WeChat QR Code" width="350" height="350" />
+
+---
+
+Thanks to all contributors and early users! 💖

deploy/helm/Chart.yaml

@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.9.0
+version: 0.9.1
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "0.9.0"
+appVersion: "0.9.1"

docs/.ai/release.md

@@ -4,5 +4,5 @@
 1. 可以通过`cat pkg/version/VERSION`
 2. 请参考changelog/`cat pkg/version/VERSION`.md文件的书写风格和格式（例如标准开头，然后先中文后英文）
 3. 通过git命令去查找从前一个版本到现在的变更，如`git log v0.2.6..HEAD --pretty=format:"%h %s" | cat`
-4. 改变pkg/version/VERSION、deploy/helm/Chart(version和appVersion).yaml和web/package.json（更新后最好cd web && npm i一下）中的版本号，如果没有特别指明，通常是+0.0.1
+4. 改变pkg/version/VERSION、deploy/helm/Chart(version和appVersion).yaml和web/package.json（更新后最好cd web && pnpm i一下）中的版本号，如果没有特别指明，通常是+0.0.1
 5. 根据2和3的内容，新增新版本的变更内容到changelog/`cat pkg/version/VERSION`.md

pkg/version/VERSION

@@ -1 +1 @@
-v0.9.0
+v0.9.1

web/package.json

@@ -1,7 +1,7 @@
 {
   "name": "unla-dashboard",
   "private": true,
-  "version": "0.9.0",
+  "version": "0.9.1",
   "type": "module",
   "description": "Unla Dashboard - A modern web interface for managing MCP Gateway services",
   "keywords": [
@@ -42,7 +42,8 @@
   "packageManager": "pnpm@9.15.0",
   "pnpm": {
     "overrides": {
-      "rollup": "4.24.0"
+      "rollup": "4.24.0",
+      "postcss": "8.4.49"
     }
   },
   "dependencies": {
@@ -96,6 +97,6 @@
     "rollup": "4.24.0",
     "tailwindcss": "3.4.17",
     "typescript": "5.7.3",
-    "vite": "^7.0.4"
+    "vite": "^6.0.7"
   }
 }