chore(main): release 0.27.0

[osanderson]

🤖 I have created a release beep boop

0.27.0 (2026-09-12)

⚠ BREAKING CHANGES

• server: server.Metadata.BackchannelAuthenticationEndpoint and every field of server.MTLSEndpointAliases are now *fapi.URL, not fapi.URL.

Features

• client: wire OpenID Federation self-issuance into client.Config (#257) (d01a08c)
• conformance-as: add OpenID Federation self-issuance support (#261) (e1ccc23)
• conformance: add a standing OpenID Federation Trust Anchor (#263) (61013f0)
• enforce OpenID Federation §12.1.1 request object rules for automatically-registered clients (1b90464)
• federation: add automatic client registration (OpenID Federation 1.0 §12.1) (fdba8f0)
• federation: add internal Entity Statement primitives (OpenID Federation 1.0) (25d8eca)
• federation: add SelfIssuer for self-issuing an Entity Configuration (ebbba04)
• federation: add SubordinateIssuer for entities acting as a Trust Anchor/Intermediate (#273) (a79516b)
• federation: add trust chain resolver (OpenID Federation 1.0 Phase 2) (784f1b0)
• federation: enforce naming_constraints and allowed_entity_types (4c913e5)
• federation: enforce per-statement max_path_length constraint (c214e99)
• federation: support CIBA and client_credentials for automatically-registered clients (46ec0f7)
• federation: support jwks_uri in automatic client registration (0b27a74)
• federation: validate Trust Mark delegation (OpenID Federation 1.0 §7.2) (0a14dc7)
• federation: verify Trust Marks (OpenID Federation 1.0 §7) (00356a2)
• server: wire automatic client registration into server.Config (73e4633)
• server: wire OpenID Federation self-issuance into server.Config (aab3d61)

Bug Fixes

• conformance: fix /api/runner call and record a second known warning (#272) (8251799)
• remove dead store flagged by staticcheck in Resolve (6082e64)
• resolve CodeQL allocation-size-overflow finding, raise test coverage (a162603)
• server: omit optional metadata URL fields instead of empty strings (d8584e0)

---

This PR was generated with Release Please. See documentation.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud