fix: v0.8.3 — correct invalid Trivy version pin in Dockerfile.full

TRIVY_VERSION=0.55.0 doesn't exist as an aquasecurity/trivy release tag,
so the full image's install script 404'd and the Docker CI job failed
on every v0.8.2 run. Bump to 0.71.2 (verified against the GitHub
releases API) and sync version manifests.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GCn1oi5XezuxxQDMwEyoA7

Author: Skyrxin

CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.8.3] - 2026-06-23
+### Fixed
+- **`Dockerfile.full` failed to build** — `TRIVY_VERSION` was pinned to `0.55.0`,
+  a release tag that doesn't exist for aquasecurity/trivy, so the install
+  script 404'd and the full (9-scanner) image build failed in CI on every
+  v0.8.2 run. Bumped to `0.71.2`.
+
 ## [0.8.2] - 2026-06-21
 ### Added
 - **Published container images** — GHCR workflow builds and pushes both the

Dockerfile.full

@@ -11,7 +11,7 @@
 
 FROM python:3.12-slim AS base
 
-ARG TRIVY_VERSION=0.55.0
+ARG TRIVY_VERSION=0.71.2
 ARG GITLEAKS_VERSION=8.18.4
 ARG OSV_SCANNER_VERSION=1.8.5
 ARG GRYPE_VERSION=0.79.6

gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "sast-mcp-server",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "description": "SAST/DAST vulnerability scanner for AI agents — 11 scanners (Bandit, njsscan, Bearer, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP) with closed-loop remediation, SARIF/SBOM/VEX export, baselines, and CI integrations",
   "mcpServers": {
     "sast": {

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sast-mcp-server"
-version = "0.8.2"
+version = "0.8.3"
 description = "A standard MCP server for SAST/DAST tools (Bandit, njsscan, Bearer, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP) — scan code for security vulnerabilities from any AI agent"
 readme = "README.md"
 license = {text = "MIT"}

sast_mcp_server/__init__.py

@@ -1,3 +1,3 @@
 """SAST MCP Server — Static Application Security Testing for AI agents."""
 
-__version__ = "0.8.2"
+__version__ = "0.8.3"

server.json

@@ -3,7 +3,7 @@
   "name": "io.github.Skyrxin/sast-mcp-server",
   "title": "SAST MCP Server",
   "description": "11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "websiteUrl": "https://github.com/Skyrxin/sast-mcp-server#readme",
   "repository": {
     "url": "https://github.com/Skyrxin/sast-mcp-server",
@@ -14,7 +14,7 @@
       "registryType": "pypi",
       "registryBaseUrl": "https://pypi.org",
       "identifier": "sast-mcp-server",
-      "version": "0.8.2",
+      "version": "0.8.3",
       "runtimeHint": "uvx",
       "transport": {
         "type": "stdio"

smithery.yaml

@@ -1,5 +1,5 @@
 name: sast-mcp-server
-version: 0.8.2
+version: 0.8.3
 description: >
   Production-grade SAST/DAST vulnerability scanner MCP server — 11 scanners
   (Bandit, njsscan, Bearer, Semgrep, Trivy, CodeQL, Checkov, Gitleaks,