v0.6.0

0.6.0 (2026-08-01)

Features

• auto-discover the app exchange params, refuse a doomed classic PAT (cbdbae6)
• reach Databricks Apps from a PAT profile via RFC 8693 token exchange (1f57152)
• reach Databricks Apps from a PAT profile via RFC 8693 token exchange (64d6eab), closes #24
• support MCP SDK 2.x alongside 1.x (5299374)

Bug Fixes

• bound supported SDK HTTP dependencies (4b1adf9)
• bound wire bytes, clamp degenerate lifetimes, pin two load-bearing defaults (c1b7f38)
• close a leak my own redaction fix introduced, and two it did not cover (ac6cc34)
• close two credential-leak paths found in review of the PAT exchange (71ded8a)
• eliminate a ReDoS and stop the read cap from severing secrets (dc7eab1)
• redact by span, and stop the pattern cap from exempting real tokens (f05e303)
• stop an OverflowError escaping with the PAT in frame, and three more (fb48df9)