chore: add CI and community hygiene by abhijeet-dhumal · Pull Request #3 · kubeflow/mcp-server

abhijeet-dhumal · 2026-04-09T16:49:28Z

Fixes #8

Hardens CI and community workflows before feature work continues.
Inspired from repo : https://github.com/kubeflow/sdk

abhijeet-dhumal · 2026-05-20T11:59:38Z

Hey @andreyvelich @kramaranya @kubeflow/kubeflow-sdk-team , are we good to ship this one ?

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

Copilot

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

This PR enhances repository engineering productivity by updating local developer tooling (uv/ruff/pre-commit/Makefile), tightening CI workflows, and adding GitHub automation for labels, stale issues, dependabot updates, and contribution templates.

Changes:

Reworked Makefile targets around uv (install/dev sync, lint/format, expanded test/coverage, cleanup).
Added/updated GitHub automation (label sync, stale bot, PR title checks, welcome messages, workflow approvals, dependabot).
Refreshed repo hygiene/config (pre-commit hooks, .gitignore, issue/PR templates, contributing docs, minor markdown cleanup).

Reviewed changes

Copilot reviewed 17 out of 20 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
pyproject.toml	Adjusts dependency grouping layout (dev group under `[dependency-groups]`).
kubeflow_mcp/trainer/resources/training-patterns.md	Removes trailing whitespace/blank line at EOF.
Makefile	Expands/organizes dev, quality, test, and cleanup targets using `uv`.
LICENSE	Normalizes final line numbering/formatting (no semantic content change).
CONTRIBUTING.md	Expands allowed Conventional Commit “Types”.
.pre-commit-config.yaml	Adds basic hooks and updates Ruff hooks/config.
.gitignore	Broadens ignored artifacts (coverage, envs, uv, notebooks, OS files).
.github/workflows/welcome-new-contributors.yaml	Adds first-interaction automation for issues/PRs.
.github/workflows/test-python.yaml	Adds `pip-audit` job; uses `setup-uv@v4` in tests.
.github/workflows/sync-labels.yaml	Adds workflow to sync labels from `.github/labels.yml`.
.github/workflows/github-stale.yaml	Adds stale issue/PR management workflow.
.github/workflows/gh-workflow-approve.yaml	Adds workflow-run approval automation gated by `ok-to-test`.
.github/workflows/check-pr-title.yaml	Switches to `pull_request_target` and expands semantic title rules.
.github/labels.yml	Introduces canonical label set for sync workflow.
.github/dependabot.yml	Adds Dependabot config for “uv” and GitHub Actions ecosystems.
.github/PULL_REQUEST_TEMPLATE.md	Updates PR template to include related issue/testing/sign-off checklist.
.github/ISSUE_TEMPLATE/feature_request.yaml	Updates feature request template and labels.
.github/ISSUE_TEMPLATE/config.yml	Adds contact links / issue template config.
.github/ISSUE_TEMPLATE/bug_report.yaml	Updates bug report template and labels/required fields.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

…5409 and PYSEC-2026-161 Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

…n verify/format Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

- dependabot.yml: change package-ecosystem from "uv" to "pip" — uv is not a supported Dependabot ecosystem; pip correctly reads pyproject.toml - .pre-commit-config.yaml: rename hook id ruff-check → ruff — ruff-check is not a valid hook id in astral-sh/ruff-pre-commit; correct ids are ruff (lint) and ruff-format - sync-labels.yaml: pin third-party actions to immutable commit SHAs (actions/checkout@v4.3.1, EndBug/label-sync@v2) for supply-chain hardening - gh-workflow-approve.yaml: already filters by head_sha client-side — no change needed Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

kramaranya · 2026-06-03T16:15:35Z

+    "idna>=3.15",       # CVE-2026-45409
+    "starlette>=1.0.1", # PYSEC-2026-161


Why do we need this?

Actually this PR adds security pip-audit checks
And the above pinned versions resolves known CVEs detected by pip-audit, but I have made sure to keep it outside direct dependencies

But I'm happy to tweak it if there is any other standard format to resolve this issues!

Let's replace pip-audit with osv-scanner in a follow-up which is used in Kubeflow-SDK's implementation.

I have created issue for follow up here : #29

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

abhijeet-dhumal · 2026-06-08T09:48:23Z

Hey @kramaranya @andreyvelich , I have addressed all the above reviews , are we good to launch ?

abhijeet-dhumal · 2026-06-24T05:22:02Z

Hey @kramaranya @andreyvelich , I have addressed all the above reviews , are we good to launch ?

@andreyvelich @kramaranya Is there anything remaining for this PR, May I request your review here!

kramaranya

Thanks @abhijeet-dhumal!
/lgtm

andreyvelich

/lgtm
/approve

google-oss-prow · 2026-06-24T10:39:36Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: andreyvelich

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [andreyvelich]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

* chore: add CI and community hygiene Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * docs: bootstrap Sphinx docs, RTD config, and CI Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * fix: track uv.lock for CI Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * ci: sync PR title types, fix publish workflow, and improve issue templates Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * ci: fix stale cron, welcome workflow permissions, and approve gate condition Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * ci: fix duplicate needs-triage label, bump setup-uv to v4, add release concurrency Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * chore: drop Sphinx docs scaffold and RTD config Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * fix: remove docs dependency from uv.lock Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * fix: remove release.yaml Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * ci: fix stale cron, approve gate logic, label texonomy and align templates with sdk Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * ci: align pre-commit with sdk, add security-audit job Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * fix: address review feedback on CI and label config Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * fix(deps): bump idna>=3.15 and starlette>=1.0.1 to resolve CVE-2026-45409 and PYSEC-2026-161 Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * fix: add constraint-dependencies in pyproject.toml Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * fix(ci): scope workflow approval to PR head SHA and use --group dev in verify/format Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * fix(ci): address Copilot review comments - dependabot.yml: change package-ecosystem from "uv" to "pip" — uv is not a supported Dependabot ecosystem; pip correctly reads pyproject.toml - .pre-commit-config.yaml: rename hook id ruff-check → ruff — ruff-check is not a valid hook id in astral-sh/ruff-pre-commit; correct ids are ruff (lint) and ruff-format - sync-labels.yaml: pin third-party actions to immutable commit SHAs (actions/checkout@v4.3.1, EndBug/label-sync@v2) for supply-chain hardening - gh-workflow-approve.yaml: already filters by head_sha client-side — no change needed Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * chore(ci): address review comments and align workflows with kubeflow/sdk Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> * chore(ci): pin aiohttp and pyjwt to resolve pip-audit CVEs Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com> --------- Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

google-oss-prow Bot added the do-not-merge/work-in-progress Work in progress label Apr 9, 2026

google-oss-prow Bot requested review from andreyvelich, astefanutti and szaher April 9, 2026 16:49

google-oss-prow Bot added the size/XL label Apr 9, 2026

abhijeet-dhumal force-pushed the ci/community-hygiene branch from 3c2636c to 4e6a592 Compare April 9, 2026 17:04

google-oss-prow Bot added size/XXL and removed size/XL labels Apr 9, 2026

abhijeet-dhumal force-pushed the ci/community-hygiene branch from 4e6a592 to 3c2636c Compare April 9, 2026 17:18

google-oss-prow Bot added size/XL and removed size/XXL labels Apr 9, 2026

abhijeet-dhumal mentioned this pull request Apr 9, 2026

feat: add Ollama agent with LlamaIndex and dynamic tool loading #4

Closed

abhijeet-dhumal marked this pull request as ready for review April 13, 2026 13:35

google-oss-prow Bot removed the do-not-merge/work-in-progress Work in progress label Apr 13, 2026

google-oss-prow Bot requested a review from Electronic-Waste April 13, 2026 13:35

abhijeet-dhumal mentioned this pull request Apr 15, 2026

chore: initialize kubeflow-mcp repository skeleton #1

Merged

abhijeet-dhumal marked this pull request as draft April 15, 2026 13:45

google-oss-prow Bot added do-not-merge/work-in-progress Work in progress size/XXL and removed size/XL labels Apr 15, 2026

abhijeet-dhumal force-pushed the ci/community-hygiene branch from 8a9f273 to e09cd13 Compare April 17, 2026 17:33

google-oss-prow Bot added size/L and removed size/XXL labels Apr 17, 2026

abhijeet-dhumal marked this pull request as ready for review April 17, 2026 17:33

google-oss-prow Bot removed the do-not-merge/work-in-progress Work in progress label Apr 17, 2026

abhijeet-dhumal marked this pull request as draft April 17, 2026 17:49

google-oss-prow Bot added the do-not-merge/work-in-progress Work in progress label Apr 17, 2026

abhijeet-dhumal force-pushed the ci/community-hygiene branch from e09cd13 to 6588c64 Compare May 11, 2026 14:07

google-oss-prow Bot added size/XL and removed size/L labels May 11, 2026

juliusvonkohout reviewed May 24, 2026

View reviewed changes

Comment thread .github/ISSUE_TEMPLATE/bug_report.yaml Outdated

fix: address review feedback on CI and label config

3dad8e0

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

abhijeet-dhumal requested review from Copilot, juliusvonkohout and mprahl May 25, 2026 08:50

Copilot AI reviewed May 25, 2026

View reviewed changes

Comment thread Makefile Outdated

Comment thread .github/workflows/gh-workflow-approve.yaml

Comment thread .pre-commit-config.yaml Outdated

Comment thread .github/workflows/sync-labels.yaml Outdated

Comment thread .github/dependabot.yml Outdated

abhijeet-dhumal added 4 commits May 25, 2026 14:24

fix(deps): bump idna>=3.15 and starlette>=1.0.1 to resolve CVE-2026-4…

eeddf3c

…5409 and PYSEC-2026-161 Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

fix: add constraint-dependencies in pyproject.toml

e6a8baa

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

fix(ci): scope workflow approval to PR head SHA and use --group dev i…

86518d5

…n verify/format Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

kramaranya reviewed Jun 3, 2026

View reviewed changes

chore(ci): address review comments and align workflows with kubeflow/sdk

43652b2

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

abhijeet-dhumal force-pushed the ci/community-hygiene branch from 9019a6a to 43652b2 Compare June 5, 2026 09:41

chore(ci): pin aiohttp and pyjwt to resolve pip-audit CVEs

0d8f329

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

abhijeet-dhumal requested a review from kramaranya June 5, 2026 09:54

abhijeet-dhumal mentioned this pull request Jun 24, 2026

feat: create initial release workflow for automated pypi publishing #28

Merged

kramaranya reviewed Jun 24, 2026

View reviewed changes

google-oss-prow Bot assigned kramaranya Jun 24, 2026

google-oss-prow Bot added the lgtm Looks good to me — approved by a reviewer label Jun 24, 2026

andreyvelich reviewed Jun 24, 2026

View reviewed changes

google-oss-prow Bot assigned andreyvelich Jun 24, 2026

google-oss-prow Bot added the approved Approved by an approver in OWNERS label Jun 24, 2026

google-oss-prow Bot merged commit 888cee2 into kubeflow:main Jun 24, 2026
8 checks passed

Kartikeya-trivedi mentioned this pull request Jul 10, 2026

feat(ci): replace pip-audit with OSV-Scanner for CVE detection #30

Merged

4 of 8 tasks

abhijeet-dhumal mentioned this pull request Jul 12, 2026

Kubeflow MCP Server 0.1.0 Release #56

Closed

11 tasks done

		"idna>=3.15", # CVE-2026-45409
		"starlette>=1.0.1", # PYSEC-2026-161

Conversation

abhijeet-dhumal commented Apr 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

abhijeet-dhumal commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

kramaranya Jun 3, 2026

Choose a reason for hiding this comment

Uh oh!

abhijeet-dhumal Jun 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

abhijeet-dhumal Jun 5, 2026

Choose a reason for hiding this comment

Uh oh!

abhijeet-dhumal Jun 5, 2026

Choose a reason for hiding this comment

Uh oh!

abhijeet-dhumal commented Jun 8, 2026

Uh oh!

abhijeet-dhumal commented Jun 24, 2026

Uh oh!

kramaranya left a comment

Choose a reason for hiding this comment

Uh oh!

andreyvelich left a comment

Choose a reason for hiding this comment

Uh oh!

google-oss-prow Bot commented Jun 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

abhijeet-dhumal commented Apr 9, 2026 •

edited

Loading

abhijeet-dhumal commented May 20, 2026 •

edited

Loading

abhijeet-dhumal Jun 5, 2026 •

edited

Loading