Migrate Dependabot toolset to modelcontextprotocol/go-sdk

pkg/github/__toolsnaps__/get_dependabot_alert.snap

@@ -1,30 +1,30 @@
 {
   "annotations": {
-    "title": "Get dependabot alert",
-    "readOnlyHint": true
+    "readOnlyHint": true,
+    "title": "Get dependabot alert"
   },
   "description": "Get details of a specific dependabot alert in a GitHub repository.",
   "inputSchema": {
+    "type": "object",
+    "required": [
+      "owner",
+      "repo",
+      "alertNumber"
+    ],
     "properties": {
       "alertNumber": {
-        "description": "The number of the alert.",
-        "type": "number"
+        "type": "number",
+        "description": "The number of the alert."
       },
       "owner": {
-        "description": "The owner of the repository.",
-        "type": "string"
+        "type": "string",
+        "description": "The owner of the repository."
       },
       "repo": {
-        "description": "The name of the repository.",
-        "type": "string"
+        "type": "string",
+        "description": "The name of the repository."
       }
-    },
-    "required": [
-      "owner",
-      "repo",
-      "alertNumber"
-    ],
-    "type": "object"
+    }
   },
   "name": "get_dependabot_alert"
 }

pkg/github/__toolsnaps__/list_dependabot_alerts.snap

@@ -1,46 +1,46 @@
 {
   "annotations": {
-    "title": "List dependabot alerts",
-    "readOnlyHint": true
+    "readOnlyHint": true,
+    "title": "List dependabot alerts"
   },
   "description": "List dependabot alerts in a GitHub repository.",
   "inputSchema": {
+    "type": "object",
+    "required": [
+      "owner",
+      "repo"
+    ],
     "properties": {
       "owner": {
-        "description": "The owner of the repository.",
-        "type": "string"
+        "type": "string",
+        "description": "The owner of the repository."
       },
       "repo": {
-        "description": "The name of the repository.",
-        "type": "string"
+        "type": "string",
+        "description": "The name of the repository."
       },
       "severity": {
+        "type": "string",
         "description": "Filter dependabot alerts by severity",
         "enum": [
           "low",
           "medium",
           "high",
           "critical"
-        ],
-        "type": "string"
+        ]
       },
       "state": {
-        "default": "open",
+        "type": "string",
         "description": "Filter dependabot alerts by state. Defaults to open",
+        "default": "open",
         "enum": [
           "open",
           "fixed",
           "dismissed",
           "auto_dismissed"
-        ],
-        "type": "string"
+        ]
       }
-    },
-    "required": [
-      "owner",
-      "repo"
-    ],
-    "type": "object"
+    }
   },
   "name": "list_dependabot_alerts"
 }

pkg/github/dependabot.go

@@ -0,0 +1,182 @@
+package github
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+
+	ghErrors "github.com/github/github-mcp-server/pkg/errors"
+	"github.com/github/github-mcp-server/pkg/translations"
+	"github.com/github/github-mcp-server/pkg/utils"
+	"github.com/google/go-github/v77/github"
+	"github.com/google/jsonschema-go/jsonschema"
+	"github.com/modelcontextprotocol/go-sdk/mcp"
+)
+
+func GetDependabotAlert(getClient GetClientFn, t translations.TranslationHelperFunc) (mcp.Tool, mcp.ToolHandlerFor[map[string]any, any]) {
+	tool := mcp.Tool{
+		Name:        "get_dependabot_alert",
+		Description: t("TOOL_GET_DEPENDABOT_ALERT_DESCRIPTION", "Get details of a specific dependabot alert in a GitHub repository."),
+		Annotations: &mcp.ToolAnnotations{
+			Title:        t("TOOL_GET_DEPENDABOT_ALERT_USER_TITLE", "Get dependabot alert"),
+			ReadOnlyHint: true,
+		},
+		InputSchema: &jsonschema.Schema{
+			Type: "object",
+			Properties: map[string]*jsonschema.Schema{
+				"owner": {
+					Type:        "string",
+					Description: "The owner of the repository.",
+				},
+				"repo": {
+					Type:        "string",
+					Description: "The name of the repository.",
+				},
+				"alertNumber": {
+					Type:        "number",
+					Description: "The number of the alert.",
+				},
+			},
+			Required: []string{"owner", "repo", "alertNumber"},
+		},
+	}
+
+	handler := mcp.ToolHandlerFor[map[string]any, any](func(ctx context.Context, _ *mcp.CallToolRequest, args map[string]any) (*mcp.CallToolResult, any, error) {
+		owner, err := RequiredParam[string](args, "owner")
+		if err != nil {
+			return utils.NewToolResultError(err.Error()), nil, nil
+		}
+		repo, err := RequiredParam[string](args, "repo")
+		if err != nil {
+			return utils.NewToolResultError(err.Error()), nil, nil
+		}
+		alertNumber, err := RequiredInt(args, "alertNumber")
+		if err != nil {
+			return utils.NewToolResultError(err.Error()), nil, nil
+		}
+
+		client, err := getClient(ctx)
+		if err != nil {
+			return nil, nil, fmt.Errorf("failed to get GitHub client: %w", err)
+		}
+
+		alert, resp, err := client.Dependabot.GetRepoAlert(ctx, owner, repo, alertNumber)
+		if err != nil {
+			return ghErrors.NewGitHubAPIErrorResponse(ctx,
+				fmt.Sprintf("failed to get alert with number '%d'", alertNumber),
+				resp,
+				err,
+			), nil, nil
+		}
+		defer func() { _ = resp.Body.Close() }()
+
+		if resp.StatusCode != http.StatusOK {
+			body, err := io.ReadAll(resp.Body)
+			if err != nil {
+				return nil, nil, fmt.Errorf("failed to read response body: %w", err)
+			}
+			return utils.NewToolResultError(fmt.Sprintf("failed to get alert: %s", string(body))), nil, nil
+		}
+
+		r, err := json.Marshal(alert)
+		if err != nil {
+			return nil, nil, fmt.Errorf("failed to marshal alert: %w", err)
+		}
+
+		return utils.NewToolResultText(string(r)), nil, nil
+	})
+
+	return tool, handler
+}
+
+func ListDependabotAlerts(getClient GetClientFn, t translations.TranslationHelperFunc) (mcp.Tool, mcp.ToolHandlerFor[map[string]any, any]) {
+	tool := mcp.Tool{
+		Name:        "list_dependabot_alerts",
+		Description: t("TOOL_LIST_DEPENDABOT_ALERTS_DESCRIPTION", "List dependabot alerts in a GitHub repository."),
+		Annotations: &mcp.ToolAnnotations{
+			Title:        t("TOOL_LIST_DEPENDABOT_ALERTS_USER_TITLE", "List dependabot alerts"),
+			ReadOnlyHint: true,
+		},
+		InputSchema: &jsonschema.Schema{
+			Type: "object",
+			Properties: map[string]*jsonschema.Schema{
+				"owner": {
+					Type:        "string",
+					Description: "The owner of the repository.",
+				},
+				"repo": {
+					Type:        "string",
+					Description: "The name of the repository.",
+				},
+				"state": {
+					Type:        "string",
+					Description: "Filter dependabot alerts by state. Defaults to open",
+					Enum:        []any{"open", "fixed", "dismissed", "auto_dismissed"},
+					Default:     json.RawMessage(`"open"`),
+				},
+				"severity": {
+					Type:        "string",
+					Description: "Filter dependabot alerts by severity",
+					Enum:        []any{"low", "medium", "high", "critical"},
+				},
+			},
+			Required: []string{"owner", "repo"},
+		},
+	}
+
+	handler := mcp.ToolHandlerFor[map[string]any, any](func(ctx context.Context, _ *mcp.CallToolRequest, args map[string]any) (*mcp.CallToolResult, any, error) {
+		owner, err := RequiredParam[string](args, "owner")
+		if err != nil {
+			return utils.NewToolResultError(err.Error()), nil, nil
+		}
+		repo, err := RequiredParam[string](args, "repo")
+		if err != nil {
+			return utils.NewToolResultError(err.Error()), nil, nil
+		}
+		state, err := OptionalParam[string](args, "state")
+		if err != nil {
+			return utils.NewToolResultError(err.Error()), nil, nil
+		}
+		severity, err := OptionalParam[string](args, "severity")
+		if err != nil {
+			return utils.NewToolResultError(err.Error()), nil, nil
+		}
+
+		client, err := getClient(ctx)
+		if err != nil {
+			return nil, nil, fmt.Errorf("failed to get GitHub client: %w", err)
+		}
+
+		alerts, resp, err := client.Dependabot.ListRepoAlerts(ctx, owner, repo, &github.ListAlertsOptions{
+			State:    ToStringPtr(state),
+			Severity: ToStringPtr(severity),
+		})
+		if err != nil {
+			return ghErrors.NewGitHubAPIErrorResponse(ctx,
+				fmt.Sprintf("failed to list alerts for repository '%s/%s'", owner, repo),
+				resp,
+				err,
+			), nil, nil
+		}
+		defer func() { _ = resp.Body.Close() }()
+
+		if resp.StatusCode != http.StatusOK {
+			body, err := io.ReadAll(resp.Body)
+			if err != nil {
+				return nil, nil, fmt.Errorf("failed to read response body: %w", err)
+			}
+			return utils.NewToolResultError(fmt.Sprintf("failed to list alerts: %s", string(body))), nil, nil
+		}
+
+		r, err := json.Marshal(alerts)
+		if err != nil {
+			return nil, nil, fmt.Errorf("failed to marshal alerts: %w", err)
+		}
+
+		return utils.NewToolResultText(string(r)), nil, nil
+	})
+
+	return tool, handler
+}