Fix OCI package validation, upgrade actions, use latest mcp-publisher

- Remove version field from OCI packages (version goes in identifier tag only)
- Upgrade actions/checkout to v5 (Node.js 20 deprecation)
- Use releases/latest/download for mcp-publisher (future-proof)
- server.json: use :latest placeholder (release workflow sets exact version)

Author: IvanBiruk

.github/workflows/ci.yml

@@ -19,7 +19,7 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: actions/setup-python@v5
         with:
@@ -50,7 +50,7 @@ jobs:
     needs: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: docker/setup-buildx-action@v3
 

.github/workflows/release.yml

@@ -33,7 +33,7 @@ jobs:
     environment: release
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
@@ -105,12 +105,16 @@ jobs:
           data['version'] = version
           if 'packages' in data:
               for package in data['packages']:
-                  package['version'] = version
-                  if package.get('registryType') == 'oci':
+                  registry_type = package.get('registryType')
+                  if registry_type == 'oci':
+                      # OCI packages: version goes in identifier tag, NOT as a field
+                      package.pop('version', None)
                       identifier = package.get('identifier', '')
                       if ':' in identifier:
                           base = identifier.rsplit(':', 1)[0]
                           package['identifier'] = f'{base}:{version}'
+                  else:
+                      package['version'] = version
           with open('server.json', 'w') as f:
               json.dump(data, f, indent=2)
               f.write('\n')
@@ -168,7 +172,7 @@ jobs:
 
       - name: Install MCP Publisher CLI
         run: |
-          curl -L "https://github.com/modelcontextprotocol/registry/releases/download/v1.5.0/mcp-publisher_$(uname -s | tr '[:upper:]' '[:lower:]')_$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/').tar.gz" | tar xz mcp-publisher
+          curl -L "https://github.com/modelcontextprotocol/registry/releases/latest/download/mcp-publisher_$(uname -s | tr '[:upper:]' '[:lower:]')_$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/').tar.gz" | tar xz mcp-publisher
           chmod +x mcp-publisher
 
       - name: Login to MCP Registry (GitHub OIDC)

server.json

@@ -33,7 +33,7 @@
   "packages": [
     {
       "registryType": "oci",
-      "identifier": "ghcr.io/codealive-ai/codealive-mcp:0.5.1",
+      "identifier": "ghcr.io/codealive-ai/codealive-mcp:latest",
       "runtimeHint": "docker",
       "transport": {
         "type": "stdio"