chore: add CI and community hygiene by abhijeet-dhumal · Pull Request #3 · kubeflow/mcp-server

abhijeet-dhumal · 2026-04-09T16:49:28Z

Fixes #8

Hardens CI and community workflows before feature work continues.
Inspired from repo : https://github.com/kubeflow/sdk

…lates with sdk Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

abhijeet-dhumal · 2026-05-20T11:59:38Z

Hey @andreyvelich @kramaranya @kubeflow/kubeflow-sdk-team , are we good to ship this one ?

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

Copilot

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

This PR enhances repository engineering productivity by updating local developer tooling (uv/ruff/pre-commit/Makefile), tightening CI workflows, and adding GitHub automation for labels, stale issues, dependabot updates, and contribution templates.

Changes:

Reworked Makefile targets around uv (install/dev sync, lint/format, expanded test/coverage, cleanup).
Added/updated GitHub automation (label sync, stale bot, PR title checks, welcome messages, workflow approvals, dependabot).
Refreshed repo hygiene/config (pre-commit hooks, .gitignore, issue/PR templates, contributing docs, minor markdown cleanup).

Reviewed changes

Copilot reviewed 17 out of 20 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
pyproject.toml	Adjusts dependency grouping layout (dev group under `[dependency-groups]`).
kubeflow_mcp/trainer/resources/training-patterns.md	Removes trailing whitespace/blank line at EOF.
Makefile	Expands/organizes dev, quality, test, and cleanup targets using `uv`.
LICENSE	Normalizes final line numbering/formatting (no semantic content change).
CONTRIBUTING.md	Expands allowed Conventional Commit “Types”.
.pre-commit-config.yaml	Adds basic hooks and updates Ruff hooks/config.
.gitignore	Broadens ignored artifacts (coverage, envs, uv, notebooks, OS files).
.github/workflows/welcome-new-contributors.yaml	Adds first-interaction automation for issues/PRs.
.github/workflows/test-python.yaml	Adds `pip-audit` job; uses `setup-uv@v4` in tests.
.github/workflows/sync-labels.yaml	Adds workflow to sync labels from `.github/labels.yml`.
.github/workflows/github-stale.yaml	Adds stale issue/PR management workflow.
.github/workflows/gh-workflow-approve.yaml	Adds workflow-run approval automation gated by `ok-to-test`.
.github/workflows/check-pr-title.yaml	Switches to `pull_request_target` and expands semantic title rules.
.github/labels.yml	Introduces canonical label set for sync workflow.
.github/dependabot.yml	Adds Dependabot config for “uv” and GitHub Actions ecosystems.
.github/PULL_REQUEST_TEMPLATE.md	Updates PR template to include related issue/testing/sign-off checklist.
.github/ISSUE_TEMPLATE/feature_request.yaml	Updates feature request template and labels.
.github/ISSUE_TEMPLATE/config.yml	Adds contact links / issue template config.
.github/ISSUE_TEMPLATE/bug_report.yaml	Updates bug report template and labels/required fields.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

…5409 and PYSEC-2026-161 Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

…n verify/format Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

- dependabot.yml: change package-ecosystem from "uv" to "pip" — uv is not a supported Dependabot ecosystem; pip correctly reads pyproject.toml - .pre-commit-config.yaml: rename hook id ruff-check → ruff — ruff-check is not a valid hook id in astral-sh/ruff-pre-commit; correct ids are ruff (lint) and ruff-format - sync-labels.yaml: pin third-party actions to immutable commit SHAs (actions/checkout@v4.3.1, EndBug/label-sync@v2) for supply-chain hardening - gh-workflow-approve.yaml: already filters by head_sha client-side — no change needed Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

kramaranya · 2026-06-03T16:15:35Z

+    "idna>=3.15",       # CVE-2026-45409
+    "starlette>=1.0.1", # PYSEC-2026-161


Why do we need this?

Actually this PR adds security pip-audit checks
And the above pinned versions resolves known CVEs detected by pip-audit, but I have made sure to keep it outside direct dependencies

But I'm happy to tweak it if there is any other standard format to resolve this issues!

Let's replace pip-audit with osv-scanner in a follow-up which is used in Kubeflow-SDK's implementation.

I have created issue for follow up here : #29

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

abhijeet-dhumal · 2026-06-08T09:48:23Z

Hey @kramaranya @andreyvelich , I have addressed all the above reviews , are we good to launch ?

abhijeet-dhumal · 2026-06-24T05:22:02Z

Hey @kramaranya @andreyvelich , I have addressed all the above reviews , are we good to launch ?

@andreyvelich @kramaranya Is there anything remaining for this PR, May I request your review here!

kramaranya

Thanks @abhijeet-dhumal!
/lgtm

andreyvelich

/lgtm
/approve

google-oss-prow · 2026-06-24T10:39:36Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: andreyvelich

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [andreyvelich]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

google-oss-prow Bot added the do-not-merge/work-in-progress Work in progress label Apr 9, 2026

google-oss-prow Bot requested review from andreyvelich, astefanutti and szaher April 9, 2026 16:49

google-oss-prow Bot added the size/XL label Apr 9, 2026

abhijeet-dhumal force-pushed the ci/community-hygiene branch from 3c2636c to 4e6a592 Compare April 9, 2026 17:04

google-oss-prow Bot added size/XXL and removed size/XL labels Apr 9, 2026

abhijeet-dhumal force-pushed the ci/community-hygiene branch from 4e6a592 to 3c2636c Compare April 9, 2026 17:18

google-oss-prow Bot added size/XL and removed size/XXL labels Apr 9, 2026

abhijeet-dhumal mentioned this pull request Apr 9, 2026

feat: add Ollama agent with LlamaIndex and dynamic tool loading #4

Draft

abhijeet-dhumal marked this pull request as ready for review April 13, 2026 13:35

google-oss-prow Bot removed the do-not-merge/work-in-progress Work in progress label Apr 13, 2026

google-oss-prow Bot requested a review from Electronic-Waste April 13, 2026 13:35

abhijeet-dhumal mentioned this pull request Apr 15, 2026

chore: initialize kubeflow-mcp repository skeleton #1

Merged

abhijeet-dhumal marked this pull request as draft April 15, 2026 13:45

google-oss-prow Bot added do-not-merge/work-in-progress Work in progress size/XXL and removed size/XL labels Apr 15, 2026

abhijeet-dhumal force-pushed the ci/community-hygiene branch from 8a9f273 to e09cd13 Compare April 17, 2026 17:33

google-oss-prow Bot added size/L and removed size/XXL labels Apr 17, 2026

abhijeet-dhumal marked this pull request as ready for review April 17, 2026 17:33

google-oss-prow Bot removed the do-not-merge/work-in-progress Work in progress label Apr 17, 2026

abhijeet-dhumal marked this pull request as draft April 17, 2026 17:49

google-oss-prow Bot added the do-not-merge/work-in-progress Work in progress label Apr 17, 2026

abhijeet-dhumal force-pushed the ci/community-hygiene branch from e09cd13 to 6588c64 Compare May 11, 2026 14:07

google-oss-prow Bot added size/XL and removed size/L labels May 11, 2026

abhijeet-dhumal requested a review from kramaranya May 15, 2026 11:16

abhijeet-dhumal added 2 commits May 15, 2026 17:24

ci: fix stale cron, approve gate logic, label texonomy and align temp…

e981387

…lates with sdk Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

ci: align pre-commit with sdk, add security-audit job

9edfee1

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

juliusvonkohout reviewed May 24, 2026

View reviewed changes

Comment thread .github/ISSUE_TEMPLATE/bug_report.yaml Outdated

fix: address review feedback on CI and label config

3dad8e0

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

abhijeet-dhumal requested review from Copilot, juliusvonkohout and mprahl May 25, 2026 08:50

Copilot AI reviewed May 25, 2026

View reviewed changes

Comment thread Makefile Outdated

Comment thread .github/workflows/gh-workflow-approve.yaml

Comment thread .pre-commit-config.yaml Outdated

Comment thread .github/workflows/sync-labels.yaml Outdated

Comment thread .github/dependabot.yml Outdated

abhijeet-dhumal added 4 commits May 25, 2026 14:24

fix(deps): bump idna>=3.15 and starlette>=1.0.1 to resolve CVE-2026-4…

eeddf3c

…5409 and PYSEC-2026-161 Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

fix: add constraint-dependencies in pyproject.toml

e6a8baa

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

fix(ci): scope workflow approval to PR head SHA and use --group dev i…

86518d5

…n verify/format Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

kramaranya reviewed Jun 3, 2026

View reviewed changes

chore(ci): address review comments and align workflows with kubeflow/sdk

43652b2

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

abhijeet-dhumal force-pushed the ci/community-hygiene branch from 9019a6a to 43652b2 Compare June 5, 2026 09:41

chore(ci): pin aiohttp and pyjwt to resolve pip-audit CVEs

0d8f329

Signed-off-by: abhijeet-dhumal <abhijeetdhumal652@gmail.com>

abhijeet-dhumal requested a review from kramaranya June 5, 2026 09:54

abhijeet-dhumal mentioned this pull request Jun 24, 2026

feat: Create initial Release workflow for automated Pypi publishing #28

Open

kramaranya reviewed Jun 24, 2026

View reviewed changes

google-oss-prow Bot assigned kramaranya Jun 24, 2026

google-oss-prow Bot added the lgtm Looks good to me — approved by a reviewer label Jun 24, 2026

andreyvelich reviewed Jun 24, 2026

View reviewed changes

google-oss-prow Bot assigned andreyvelich Jun 24, 2026

google-oss-prow Bot added the approved Approved by an approver in OWNERS label Jun 24, 2026

google-oss-prow Bot merged commit 888cee2 into kubeflow:main Jun 24, 2026
8 checks passed

		"idna>=3.15", # CVE-2026-45409
		"starlette>=1.0.1", # PYSEC-2026-161

Uh oh!

Conversation

abhijeet-dhumal commented Apr 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

abhijeet-dhumal commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

kramaranya Jun 3, 2026

Choose a reason for hiding this comment

Uh oh!

abhijeet-dhumal Jun 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

abhijeet-dhumal Jun 5, 2026

Choose a reason for hiding this comment

Uh oh!

abhijeet-dhumal Jun 5, 2026

Choose a reason for hiding this comment

Uh oh!

abhijeet-dhumal commented Jun 8, 2026

Uh oh!

abhijeet-dhumal commented Jun 24, 2026

Uh oh!

kramaranya left a comment

Choose a reason for hiding this comment

Uh oh!

andreyvelich left a comment

Choose a reason for hiding this comment

Uh oh!

google-oss-prow Bot commented Jun 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

abhijeet-dhumal commented Apr 9, 2026 •

edited

Loading

abhijeet-dhumal commented May 20, 2026 •

edited

Loading

abhijeet-dhumal Jun 5, 2026 •

edited

Loading