docs: Update CI/CD workflows and add security configuration docs

   - Improved CI/CD workflows with better structure
   - Fixed CHANGELOG dates (2025 → 2026)
   - Added documentation for DBEAVER_READ_ONLY and DBEAVER_DISABLED_TOOLS
   - Added read-only configuration example
   - Updated package-lock.json

Author: srthkdev

.github/workflows/ci.yml

@@ -15,9 +15,10 @@ jobs:
         node-version: [18.x, 20.x, 22.x]
 
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout code
+        uses: actions/checkout@v4
 
-      - name: Use Node.js ${{ matrix.node-version }}
+      - name: Setup Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
@@ -26,32 +27,27 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Lint
+      - name: Run linter
         run: npm run lint
 
       - name: Build
         run: npm run build
 
-      - name: Test
+      - name: Run tests
         run: npm test
 
-  publish-check:
-    runs-on: ubuntu-latest
-    needs: build
-    if: github.ref == 'refs/heads/main'
+      - name: Check for vulnerabilities
+        run: npm audit --audit-level=high
+        continue-on-error: true
 
+  typecheck:
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-
       - uses: actions/setup-node@v4
         with:
           node-version: '20.x'
           cache: 'npm'
-
       - run: npm ci
-      - run: npm run build
-
-      - name: Check package version
-        run: |
-          CURRENT_VERSION=$(node -p "require('./package.json').version")
-          echo "Current version: $CURRENT_VERSION"
+      - name: Type check
+        run: npm run typecheck

.github/workflows/release.yml

@@ -6,31 +6,43 @@ on:
       - 'v*'
 
 jobs:
-  publish:
+  release:
     runs-on: ubuntu-latest
     permissions:
       contents: write
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout code
+        uses: actions/checkout@v4
 
-      - uses: actions/setup-node@v4
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
           node-version: '20.x'
           registry-url: 'https://registry.npmjs.org'
           cache: 'npm'
 
-      - run: npm ci
-      - run: npm run build
-      - run: npm test
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run linter
+        run: npm run lint
+
+      - name: Build
+        run: npm run build
+
+      - name: Run tests
+        run: npm test
 
       - name: Publish to npm
         run: npm publish --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           generate_release_notes: true
+          files: |
+            dist/**

CHANGELOG.md

@@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.2.4] - 2025-01-14
+## [1.2.4] - 2026-01-15
 
 ### Added
 - Native MySQL/MariaDB support via `mysql2` library
@@ -26,7 +26,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Security vulnerabilities in dependencies
 - `@types/mssql` moved to devDependencies
 
-## [1.2.3] - 2025-01-07
+## [1.2.3] - 2026-01-07
 
 ### Added
 - Native MSSQL/SQL Server support via `mssql` library

docs-site/docs/getting-started/configuration.md

@@ -39,6 +39,21 @@ To use DBeaver MCP Server with Claude Desktop, add the following to your configu
 }
 ```
 
+### Read-Only Configuration
+```json
+{
+  "mcpServers": {
+    "dbeaver": {
+      "command": "dbeaver-mcp-server",
+      "env": {
+        "DBEAVER_READ_ONLY": "true",
+        "DBEAVER_TIMEOUT": "30000"
+      }
+    }
+  }
+}
+```
+
 ## Environment Variables
 
 ### Core Variables
@@ -47,6 +62,10 @@ To use DBeaver MCP Server with Claude Desktop, add the following to your configu
 - `DBEAVER_TIMEOUT`: Set the query timeout in milliseconds (default: 30000)
 - `DBEAVER_DEBUG`: Set to `true` to enable debug logging
 
+### Security Variables
+- `DBEAVER_READ_ONLY`: Set to `true` to disable all write operations (blocks `write_query`, `create_table`, `alter_table`, `drop_table`)
+- `DBEAVER_DISABLED_TOOLS`: Comma-separated list of tool names to disable (e.g., `drop_table,alter_table`)
+
 ### Platform-Specific Paths
 ```bash
 # macOS
@@ -70,6 +89,14 @@ dbeaver-mcp-server
 export DBEAVER_DEBUG=false
 export DBEAVER_TIMEOUT=120000
 dbeaver-mcp-server
+
+# Read-only mode (disable all write operations)
+export DBEAVER_READ_ONLY=true
+dbeaver-mcp-server
+
+# Disable specific tools
+export DBEAVER_DISABLED_TOOLS="drop_table,alter_table"
+dbeaver-mcp-server
 ```
 
 ## Cursor IDE Integration