v0.8.0

What's Changed

• update to security arch doc by @maleck13 in #1072
• fix stale docs: phantom fields, wrong secret refs, outdated detection logic, historical plumbing by @jasonmadigan in #1074
• feat: add review-with-plan skill for plan-aligned PR reviews by @maleck13 in #1059
• e2e: run only [Happy] tests on PRs, full suite nightly. Closes #960 by @manik3160 in #961
• add a maintainence prompt to help identify general improvements by @maleck13 in #1063
• docs: add kubelet Secret sync delay to troubleshooting guide by @jasonmadigan in #1094
• fix: deleted MCPVirtualServer resources persist in broker after config change by @ayuxsh009 in #985
• docs: enforce issue-first PR rule, replace AGENTS.md with symlink by @jasonmadigan in #1112
• fixes : #1089 (L3) by @aniketpandey05 in #1096
• ci: cut PR-gate e2e wall time via setup image caching and rollout-churn fixes by @jasonmadigan in #1121
• chore: add PR template with pre-review checklist by @david-martin in #1007
• fix(remote-github): validate AuthPolicy CRD and ensure namespace befo… by @Aditya7880900936 in #852
• docs: exempt bugfixes and security patches from issue-first rule by @jasonmadigan in #1126
• fix: rewrite elicitation IDs in sseRewriter.Flush() for final partial SSE lines by @Prachi194agrawal in #967
• removed the mcp lock from validateservertools by @malladinagarjuna2 in #1101
• fixes: #1089 (L7) by @aniketpandey05 in #1097
• test(e2e): cover prompts/list filtering via x-mcp-authorized JWT by @namansh70747 in #1118
• ci: pre-baked e2e node image and lighter PR-gate test scope by @jasonmadigan in #1122
• fix: clean up elicitation idmap entries on interrupted ext_proc streams by @shiavm006 in #941
• fix(session): bound JWTManager.Terminate cache deletion with a 5s timeout by @SarthakB11 in #924
• fix(broker): add transport timeouts to upstream HTTP client by @xenonnn4w in #1047
• Fix tls hairpin by @maleck13 in #1133
• docs: fix MCPServer typo in test_cases.md by @muskiteer in #1127
• collecting manual test cases for release by @trepel in #1025
• Update determineProtocol: incorrectly using listener protocol for all backend connections by @maleck13 in #1135
• per-server SNI for hairpin TLS connections by @maleck13 in #1156
• fix: align CI Kind cluster setup with pinned binary across all workflows by @jasonmadigan in #1154
• add some invariants to help agents avoid mistakes by @maleck13 in #1166
• Add PR focus workflow for contributor PR management by @david-martin in #1168
• Drop auto-draft conversion from PR focus workflow by @david-martin in #1173
• fix(broker): stop forwarding Cookie/Proxy-Authorization to user-specific upstreams by @PRAteek-singHWY in #1172
• Add s390x platform support in workflows by @Niha-2612 in #1157
• fix: correct Sever Server typo in method and variable names by @aniketpandey05 in #1175
• ci: add linkinator broken-link check for documentation by @Boomatang in #952
• fix(broker): use router-injected verified sub for elicitation identity binding by @namansh70747 in #1116
• test: add protocol version coverage (#363) by @namansh70747 in #1075
• update docs to call out single listener pattern for https by @maleck13 in #1163
• condition for jwt hs256 extending till 32 bytes by @malladinagarjuna2 in #1102
• Remove PR focus workflow by @david-martin in #1185
• fix missing params for upstream.MCPNamein filtered_tools_handler by @aniketpandey05 in #1180
• fix(charts): support advanced MCPGatewayExtension configuration by @rajatrsrivastav in #938
• fix(ci): add multi-stage builds to test server Dockerfiles by @david-martin in #1177
• docs: split external MCP server docs into guide and tutorial by @Aditya7880900936 in #835
• docs: add PR policy to CONTRIBUTING.md by @Patryk-Stefanski in #1193
• docs: add rule against working on untriaged issues by @Patryk-Stefanski in #1196
• deps(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.1 in the grpc group across 1 directory by @dependabot[bot] in #1003
• ci: add e2e compile check to test workflow by @jasonmadigan in #1183
• Gh 1100 by @maleck13 in #1149
• Post-release: bump version to 0.7.1, update release branch naming by @david-martin in #1161
• deps(deps): bump the otel group across 1 directory with 10 updates by @dependabot[bot] in #1071
• improve the token url elicitatoin demo by enabling authpolicies to be… by @maleck13 in #1064
• fix: use BUFFERED request body mode for reliable ClearRouteCache by @maleck13 in #1201
• remove controller->broker status polling for MCPServerRegistration by @jasonmadigan in #1187
• fix: update broken documentation links by @david-martin in #1202
• Remove static HTTPRoute duplication by @Aditya7880900936 in #975
• chore: add contributor governance workflow by @R-Lawton in #1210
• fix(broker-router): honor --log-level=4 (warn) instead of defaulting to debug by @PRAteek-singHWY in #1141
• docs: add contributor limits for issues and PRs by @Patryk-Stefanski in #1211
• fix: add /status route to gateway HTTPRoute and fix conformance CI poll by @jasonmadigan in #1214
• fix: remove dead HTTPRoute patch from mcp-system overlay by @aniketpandey05 in #1204
• write MCPVirtualServer config to all MCPGatewayExtension namespaces by @Patryk-Stefanski in #1212
• deps(deps): bump github.com/mark3labs/mcp-go from 0.53.0 to 0.55.1 by @dependabot[bot] in #1209
• deps(deps): bump istio.io/api from 1.29.0 to 1.30.2 by @dependabot[bot] in #1208
• deps(deps): bump the golang-x group across 1 directory with 2 updates by @dependabot[bot] in #1207
• added a test for the non-default path registration by @malladinagarjuna2 in #1179
• fix(mcp-router): make ExtProcServer.RoutingConfig swap race-free by @SarthakB11 in #925
• deps: bump k8s v0.36, controller-runtime v0.24.1, gateway-api v1.6.0 by @Patryk-Stefanski in #1216
• fix: expire elicited user tokens by @avinxshKD in #1151
• fix: use direct map lookup in GetVirtualServerByHeader by @aniketpandey05 in #1189
• E2e test improvements - Parallel execution by default by @maleck13 in #1225
• fix: derive internal hostname from gatewayClassName instead of hardcoding istio by @Patryk-Stefanski in #1241
• feat: add caCertBundleRef to MCPGatewayExtension by @david-martin in #1224
• feat: add spec.logLevel field to MCPGatewayExtension by @aniketpandey05 in #1153
• fix: add Serial decorator to CA Cert Bundle e2e test by @david-martin in #1246
• feat: migrate from mark3labs/mcp-go to official MCP Go SDK by @jasonmadigan in #1218
• Review and improve issue-triage workflow (#650) by @vibhor-5 in #906
• fix: correct actions/github-script SHA in issue-triage workflow by @Patryk-Stefanski in #1260
• fix: stop issue-triage workflow from stripping maintainer labels by @david-martin in #1262
• fix(broker): keep user-specific tools when the x-mcp-authorized filter runs by @PRAteek-singHWY in #1220
• fix: prevent standalone SSE failures killing broker upstream sessions by @jasonmadigan in #1264
• promote gateway apis to v1 by @malladinagarjuna2 in #1259
• Isolated router by @maleck13 in #1269
• fix: v1 migration follow-up cleanup by @david-martin in #1273
• Obfuscate session IDs in router/broker log output (#1279) by @Prat260104 in #1286
• docs: metrics phase 3 design by @david-martin in #1281
• docs: MCP Resources Federation design doc by @kkukadia in #1261
• docs: update standalone binary install guide by @david-martin in #1270
• deps(deps): bump sigs.k8s.io/gateway-api from 1.6.0 to 1.6.1 in the k8s-ecosystem group by @dependabot[bot] in #1288
• deps(deps): bump the golang-x group with 2 updates by @dependabot[bot] in #1290
• deps(deps): bump istio.io/api from 1.30.2 to 1.30.3 by @dependabot[bot] in #1291
• deps(deps): bump github.com/modelcontextprotocol/go-sdk from 1.7.0-pre.1 to 1.7.0-pre.3 by @dependabot[bot] in #1292
• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /tests/servers/oidc-server in the go_modules group across 1 directory by @dependabot[bot] in #1297
• deps(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 in the grpc group across 1 directory by @dependabot[bot] in #1289
• feat(e2e): support running e2e tests on OpenShift clusters by @trepel in #1294
• fix(e2e): improve reliability for multi-gateway and notification tests by @trepel in #1296
• First Implementation 2026 protocol by @maleck13 in #1287
• feat: metrics phase 3 — broker Prometheus metrics and dedicated scrape endpoint by @Patryk-Stefanski in #1293
• feat: add resource listing to upstream MCP connections by @kkukadia in #1299
• fix ci e2e env by @maleck13 in #1312
• docs: add AI-assisted troubleshooting agent by @Patryk-Stefanski in #1222
• fix: derive protocol-2026 server hostnames from E2E_DOMAIN by @trepel in #1315
• Fix (#1040): Replace sleep loops with explicit finalizer-wait in MCPServerRegistration controller integration tests- #1285 by @Prat260104 in #1320
• Update version to 0.8.0 by @david-martin in #1321

New Contributors

• @manik3160 made their first contribution in #961
• @ayuxsh009 made their first contribution in #985
• @aniketpandey05 made their first contribution in #1096
• @Prachi194agrawal made their first contribution in #967
• @namansh70747 made their first contribution in #1118
• @SarthakB11 made their first contribution in #924
• @xenonnn4w made their first contribution in #1047
• @muskiteer made their first contribution in #1127
• @PRAteek-singHWY made their first contribution in #1172
• @Niha-2612 made their first contribution in #1157
• @Boomatang made their first contribution in #952
• @rajatrsrivastav made their first contribution in #938
• @avinxshKD made their first contribution in #1151
• @Prat260104 made their first contribution in #1286

Full Changelog: v0.7.1...v0.8.0