chore(release): prepare 1.0.3 dependency refresh

Update runtime and tooling dependencies while preserving the 1.0.3 repo batch-limit release work under the documented verification gates.

Author: AlbinoGeek

AGENTS.md

@@ -18,7 +18,7 @@ IDEs injecting context: don't re-link from rules.
 | [`src/server/tools.ts`](src/server/tools.ts) | `registerRethunkGitHubTools` — dispatches to `register*` below |
 | [`src/server/json.ts`](src/server/json.ts) | `MCP_JSON_FORMAT_VERSION="2"`, `jsonRespond()` (minified), `errorRespond`, `mkError`, `mkLocalRepoNoRemote`, `spreadDefined`, `truncateLines`, `truncateText` |
 | [`src/server/utils.ts`](src/server/utils.ts) | `timeAgo`, `parseSince`, `extractPRNumbers`, `extractFirstPR`, `tailTruncate`, `CheckNode` (interface), `normalizeFailedChecks` — shared across tool files |
-| [`src/server/schemas.ts`](src/server/schemas.ts) | `FormatSchema`, `RepoRefSchema`, `LocalOrRemoteRepoSchema`, `MaxCommitsSchema`, `MaxLogLinesSchema` |
+| [`src/server/schemas.ts`](src/server/schemas.ts) | `FormatSchema`, `RepoRefSchema`, `LocalOrRemoteRepoSchema`, `MaxCommitsSchema`, `MaxLogLinesSchema`, **`MAX_REPOS_PER_REQUEST`** (64; caps `repo_status` / `ecosystem_activity` `repos[]`) |
 | [`src/server/github-auth.ts`](src/server/github-auth.ts) | `gateAuth` (GITHUB_TOKEN → GH_TOKEN → gh CLI), `resetAuthCache` |
 | [`src/server/github-client.ts`](src/server/github-client.ts) | `getOctokit` (REST), `graphqlQuery` (typed GraphQL), `asyncPool`, `parallelApi`, `classifyError`, `parseGitHubRemoteUrl`, `resolveLocalRepoRemote`, `PRNode` (interface), `fetchPRMetadata`, `fetchLatestSemverTag` |
 | [`src/server/repo-status-tool.ts`](src/server/repo-status-tool.ts) | `repo_status` — multi-repo dashboard |

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.3] — 2026-04-21
+
+### Changed
+
+- **`repo_status`** and **`ecosystem_activity`**: raised the per-request cap on the `repos` array from **20** to **64**, via shared **`MAX_REPOS_PER_REQUEST`** in **`src/server/schemas.ts`** (aligned with **`@rethunk/mcp-multi-root-git`** inventory default). **`docs/mcp-tools.md`** and **`README.md`** updated.
+
 ## [1.0.2] — 2026-04-21
 
 ### Fixed

README.md

@@ -12,7 +12,7 @@
 
 | Tool | What it does |
 |------|-------------|
-| **`repo_status`** | Multi-repo dashboard: branch HEAD, CI, PRs, issues, latest commit — up to 20 repos in one call |
+| **`repo_status`** | Multi-repo dashboard: branch HEAD, CI, PRs, issues, latest commit — up to 64 repos in one call |
 | **`my_work`** | Cross-repo personal queue: your open PRs, review requests, assigned issues; `blockedOnMe` lens for action items |
 | **`pr_preflight`** | Pre-merge safety check: mergeable, reviews, CI, behind-base, computed `safe` verdict; batch-capable |
 | **`release_readiness`** | What would ship now: unreleased commits, associated PRs, CI on head, diff stats |

biome.json

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.4.11/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.4.13/schema.json",
   "linter": {
     "enabled": true,
     "rules": {

bun.lock

@@ -11,7 +11,7 @@ MCP clients expose tools as `{serverName}_{toolName}`. With the server registere
 
 | Short id | Client id (server `rethunk-github`) | Purpose |
 |----------|--------------------------------------|---------|
-| `repo_status` | `rethunk-github_repo_status` | Multi-repo dashboard: default branch HEAD, CI, open PRs/issues, latest commit. Up to 20 repos per call, optional local git state. |
+| `repo_status` | `rethunk-github_repo_status` | Multi-repo dashboard: default branch HEAD, CI, open PRs/issues, latest commit. Up to 64 repos per call, optional local git state. Very large batches may hit GitHub rate limits; concurrency stays at 4. |
 | `my_work` | `rethunk-github_my_work` | Cross-repo personal queue: authored PRs, review requests, assigned issues. `blockedOnMe` lens for action items. |
 | `pr_preflight` | `rethunk-github_pr_preflight` | Pre-merge safety check: mergeable, reviews, CI, behind-base, computed `safe` verdict with reasons. Batch-capable via `numbers[]`. |
 | `release_readiness` | `rethunk-github_release_readiness` | What would ship if we release now? Unreleased commits, associated PRs, CI on head, diff stats. Auto-picks latest semver tag as base. |
@@ -81,7 +81,7 @@ Future write-capable tools (e.g. a proposed `release_create`) will document thei
 
 | Name | Type | Required | Default | Description |
 |------|------|----------|---------|-------------|
-| `repos` | `(RepoRef \| LocalPath)[]` | yes | — | 1–20 repos. Each is `{ owner, repo }` or `{ localPath }`. |
+| `repos` | `(RepoRef \| LocalPath)[]` | yes | — | 1–64 repos. Each is `{ owner, repo }` or `{ localPath }`. |
 | `format` | `"markdown" \| "json"` | no | `"json"` | Output format. |
 
 **JSON output:**
@@ -353,7 +353,7 @@ The `attention` array is sorted by urgency: failing CI repos first, then by stal
 
 | Name | Type | Required | Default | Description |
 |------|------|----------|---------|-------------|
-| `repos` | `(RepoRef \| LocalPath)[]` | yes | — | 1–20 repos. Each is `{ owner, repo }` or `{ localPath }`. |
+| `repos` | `(RepoRef \| LocalPath)[]` | yes | — | 1–64 repos. Each is `{ owner, repo }` or `{ localPath }`. |
 | `since` | `string` | yes | — | ISO8601 timestamp or relative duration: `"48h"`, `"7d"`. |
 | `paths` | `string[]` | no | — | Filter to commits touching these paths (applied per repo via GraphQL `history(path:...)`). Multiple paths are OR'd together. |
 | `grep` | `string` | no | — | Regex filter applied client-side to commit message subjects. |

docs/mcp-tools.md

@@ -1,6 +1,6 @@
 {
   "name": "@rethunk/github-mcp",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "MCP stdio server: high-value GitHub rollup tools for LLMs — multi-repo dashboards, PR preflight, CI diagnosis, and more.",
   "type": "module",
   "private": false,
@@ -57,15 +57,15 @@
     "access": "public"
   },
   "dependencies": {
-    "fastmcp": "^3.35.0",
+    "fastmcp": "^4.0.1",
     "zod": "^4.3.6",
     "@octokit/rest": "^22.0.1",
     "@octokit/graphql": "^9.0.3"
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.4.11",
-    "@types/node": "^22.19.17",
+    "@biomejs/biome": "^2.4.13",
+    "@types/node": "^25.6.0",
     "rimraf": "^6.1.3",
-    "typescript": "^6.0.2"
+    "typescript": "^6.0.3"
   }
 }

package.json

@@ -129,8 +129,8 @@ describe("fetchCommitHistory", () => {
     }
     expect(result.defaultBranch).toBe("main");
     expect(Array.isArray(result.commits)).toBe(true);
-    if (result.commits.length > 0) {
-      const c = result.commits[0]!;
+    const c = result.commits[0];
+    if (c) {
       expect(c.sha7).toHaveLength(7);
       expect(typeof c.message).toBe("string");
       expect(typeof c.author).toBe("string");

src/server/compare-refs.test.ts

@@ -14,7 +14,7 @@ import {
   mkLocalRepoNoRemote,
   truncateText,
 } from "./json.js";
-import { FormatSchema, LocalOrRemoteRepoSchema } from "./schemas.js";
+import { FormatSchema, LocalOrRemoteRepoSchema, MAX_REPOS_PER_REQUEST } from "./schemas.js";
 import { extractFirstPR, parseSince } from "./utils.js";
 
 // ---------------------------------------------------------------------------
@@ -149,8 +149,10 @@ export function registerEcosystemActivityTool(server: FastMCP): void {
       repos: z
         .array(LocalOrRemoteRepoSchema)
         .min(1)
-        .max(20)
-        .describe("1–20 repos. Each is { owner, repo } or { localPath }."),
+        .max(MAX_REPOS_PER_REQUEST)
+        .describe(
+          `1–${MAX_REPOS_PER_REQUEST} repos. Each is { owner, repo } or { localPath }. GitHub may throttle very large batches.`,
+        ),
       since: z.string().describe("ISO8601 or relative duration (e.g. '48h', '7d')."),
       paths: z.array(z.string()).optional().describe("Limit to commits touching these paths."),
       grep: z.string().optional().describe("Client-side regex filter on commit subjects."),

src/server/ecosystem-activity-tool.ts

@@ -1,6 +1,7 @@
 import { describe, expect, test } from "bun:test";
 
 import { registerRepoStatusTool } from "./repo-status-tool.js";
+import { MAX_REPOS_PER_REQUEST } from "./schemas.js";
 import { captureTool } from "./test-harness.js";
 import { timeAgo } from "./utils.js";
 
@@ -51,6 +52,20 @@ describe("timeAgo", () => {
 // ---------------------------------------------------------------------------
 
 describe("repo_status tool (captureTool)", () => {
+  test(`batch size above legacy 20: ${MAX_REPOS_PER_REQUEST} localPath entries accepted`, async () => {
+    const run = captureTool(registerRepoStatusTool);
+    const repos = Array.from({ length: MAX_REPOS_PER_REQUEST }, () => ({
+      localPath: "/tmp",
+    }));
+    const text = await run({ repos, format: "json" });
+    const parsed = JSON.parse(text) as {
+      repos?: Array<{ error?: { code: string } }>;
+    };
+    if (!parsed.repos) return; // no auth
+    expect(parsed.repos).toHaveLength(MAX_REPOS_PER_REQUEST);
+    expect(parsed.repos[0]?.error?.code).toBe("LOCAL_REPO_NO_REMOTE");
+  });
+
   test("LOCAL_REPO_NO_REMOTE: JSON format", async () => {
     const run = captureTool(registerRepoStatusTool);
     const text = await run({ repos: [{ localPath: "/tmp" }], format: "json" });