v0.2.0

Minor release: new environment-variable authentication plus bug fixes and a full security dependency sweep.

Added

• Environment-variable authentication via VSPHERE_USERNAME / VSPHERE_PASSWORD, enabling the server to run on Linux, WSL, and containers (not just macOS). The macOS Keychain path is unchanged and still used when env vars are absent (#6).

Fixed

• Credential-layer errors (missing security binary, cancelled prompt) are normalized to CredentialError and handled by authenticate() instead of crashing (#6).
• list_datastores() no longer raises TypeError on null capacity/free-space values (#6).
• get_vm_details() resolves VMs whose name begins with vm- instead of 404ing on a mistaken MOID match (#6).

Security

• mcp 1.14.1 -> 1.28.1 (GHSA-vj7q-gjh5-988w, GHSA-jpw9-pfvf-9f58, GHSA-9h52-p55h-vw2f)
• urllib3 2.5.0 -> 2.8.0 (GHSA-qccp-gfcp-xxvc + decompression-bomb bypasses)
• requests 2.32.5 -> 2.33.0 (GHSA-gc5v-m9x4-r6x2)
• dev tooling: pytest 9.0.3 (CVE-2025-71176), black 26.3.1 (CVE-2026-32274), pytest-asyncio 1.4.0

Full Changelog: v0.1.1...v0.2.0