v0.67.0 (from v0.66.0)

What changed

minor release — Adds backward-compatible OAuth request metrics and instance identification capabilities alongside fixes and dependency updates.

Commits

• 70eabb3 Merge pull request #1125 from NeuralTrust/develop
• f263a96 update agentgateway image tag to 4725431 in k8s/overlays/dev
• 4b61a3e update agentgateway image tag to e74a72b in k8s/overlays/dev
• 4725431 Merge pull request #1124 from NeuralTrust/cursor/salesforce-sandbox-display-name-0b31
• e74a72b Merge pull request #1123 from NeuralTrust/cursor/newrelic-manual-oauth-1969
• a065501 Give the Salesforce sandbox catalog entry a distinct display name.
• 5147b9c fix(catalog): register New Relic OAuth manually
• 2dc2b45 update agentgateway image tag to c348cec in k8s/overlays/dev
• c348cec Merge pull request #1122 from NeuralTrust/cursor/salesforce-hosted-mcp-urls-7b3a
• d3d8ad4 fix(catalog): point Salesforce hosted MCP at the documented platform paths
• 0f5202e update agentgateway image tag to a519ed8 in k8s/overlays/dev
• 75f0afd update agentgateway image tag to d43e1a3 in k8s/overlays/dev
• a519ed8 Merge pull request #1121 from NeuralTrust/cursor/eng-2223-admin-oauth-apps-79c6
• d43e1a3 Merge pull request #1120 from NeuralTrust/cursor/drop-listed-scope-guard-a0b4
• 0d3a258 Seed manual admin OAuth apps for Salesforce, ServiceNow, Snowflake, and dbt.
• b8fe9a1 fix(oauth): apply catalog scopes on manual region rows
• 0dbf083 update agentgateway image tag to 074dba8 in k8s/overlays/dev
• 074dba8 Merge pull request #1115 from NeuralTrust/cursor/newrelic-region-scopes-a0b4
• 8942d64 update agentgateway image tag to 77e0685 in k8s/overlays/dev
• 1d1e1c0 merge develop into the New Relic region-scope fix
• 60b9f8f update agentgateway image tag to 3a01da0 in k8s/overlays/dev
• 77e0685 Merge pull request #1111 from NeuralTrust/dependabot/npm_and_yarn/frontend/develop/minor-and-patch-2ec29819dd
• 1dc9b6f Merge pull request #1110 from NeuralTrust/dependabot/go_modules/develop/minor-and-patch-970fa308f7
• 3a55158 Merge pull request #1109 from NeuralTrust/dependabot/docker/frontend/develop/node-6f08a52
• 71bba05 Merge pull request #1108 from NeuralTrust/dependabot/docker/develop/golang-4766793
• 46ab490 update agentgateway image tag to 50e868d in k8s/overlays/dev
• 3a01da0 Merge pull request #1119 from NeuralTrust/cursor/pipedream-oauth-only-shared-user-e8f4
• 25cfb8f Merge pull request #1118 from NeuralTrust/cursor/catalog-instance-reapply-5f7d
• bb99282 Merge pull request #1116 from NeuralTrust/cursor/freshworks-manual-oauth-01d5
• 574cd81 Merge pull request #1114 from NeuralTrust/cursor/pagerduty-eu-host-c030
• a2064e9 Merge pull request #1113 from NeuralTrust/cursor/skip-pinned-url-vars-0684
• 50e868d Merge pull request #1112 from NeuralTrust/cursor/long-mcp-tool-names-faef
• 573d702 fix(store): recheck live credentials before a catalog swap
• 7175038 fix(store): keep catalog reapply from taking access away
• ed0fa96 Merge branch 'develop' into cursor/freshworks-manual-oauth-01d5
• 9186222 fix(store): keep pinned URL values when refreshing an install
• 5542bd7 update agentgateway image tag to 676df8a in k8s/overlays/dev
• 8a8a1de registry: fill a vault host only for a per-instance catalog resource
• 676df8a Merge pull request #1117 from NeuralTrust/cursor/vimeo-manual-registration-2794
• 4ee41c9 catalog: state the Pipedream shared external-user risk
• b8107cf catalog: pin cross-domain OAuth contact hosts to Freshworks
• 93e432a Merge branch 'develop' into cursor/freshworks-manual-oauth-01d5
• 79ebecb catalog: limit Pipedream to OAuth and a shared external user id
• 7d07c74 fix(store): reapply catalog corrections to untouched MCP instances
• 4a0de9b catalog: mark Vimeo OAuth registration manual
• 69d455f fix(store): pin URL variables the way the install binds
• bbaa2f7 test(oauth): refresh of an old-scope grant omits scope
• f435c66 catalog: register Freshworks with a manual OAuth app (ENG-2261)
• 8236fd6 registry: keep PagerDuty region vault keys distinct and stable
• 6ef59e4 fix(oauth): send catalog scopes for a saved region URL
• 9a72072 Merge remote-tracking branch 'origin/develop' into cursor/pagerduty-eu-host-c030
• a138c01 catalog: add PagerDuty US/EU host option
• 5ac9a94 update agentgateway image tag to d4d44f3 in k8s/overlays/dev
• f2103a7 test(store,oauth): cover URL variables pinned by the admin instance
• 8d9b3c9 update agentgateway image tag to b51b638 in k8s/overlays/dev
• bd847c0 fix(mcp): keep both ends of long tool names
• d4d44f3 Merge pull request #1107 from NeuralTrust/cursor/algolia-leading-hyphen-7132
• b3d11c9 update agentgateway image tag to 3289e49 in k8s/overlays/dev
• 1eabafa fix(store): don't ask for URL variables the admin instance already pins
• b51b638 Merge pull request #1106 from NeuralTrust/cursor/catalog-storyblok-replicate-8fb9
• 3289e49 Merge pull request #1105 from NeuralTrust/cursor/catalog-checkr-shortcut-descriptions-3a89
• 1174950 deps: bump the minor-and-patch group in /frontend with 17 updates
• dfb3009 deps: bump the minor-and-patch group with 4 updates
• 9f75479 docker(deps): bump node from 143494b to 6f08a52 in /frontend
• 4f87087 docker(deps): bump golang from 2f84bc9 to 4766793
• 08478dc fix(registry): allow a leading hyphen in URL segment variables
• f962391 catalog: Storyblok manual registration, Replicate SSE unsupported
• edd1296 catalog: fix Checkr and Shortcut descriptions
• 86e3c19 update agentgateway image tag to b4b22a9 in k8s/overlays/dev
• b4b22a9 Merge pull request #1104 from NeuralTrust/cursor/mcp-naming-sentinel-followup-f045
• adda9d7 update agentgateway image tag to d9b2fb1 in k8s/overlays/dev
• 294539f merge develop into the v2-only naming follow-up
• 6f81768 fix(mcp): make v2 the only tool naming scheme
• d9b2fb1 Merge pull request #1103 from NeuralTrust/cursor/legacy-refresh-retain-marker-64d5
• b37d3e5 fix(mcp): keep hidden tools out of cross-server names and gate v2 stamping
• ac59bbd fix(oauth): pass the upstream resolution into the authorize probe
• 794ee20 merge develop into the legacy refresh-marker fix
• 3a0c33f fix(oauth): refresh a legacy DCR client only when a redirect swap kept it
• e039b08 update agentgateway image tag to 09f8879 in k8s/overlays/dev
• 1c0adb9 Merge pull request #1102 from NeuralTrust/cursor/catalog-seed-data-fixes-4bc8
• 1dfa1d2 update agentgateway image tag to 3b470da in k8s/overlays/dev
• 09f8879 Merge pull request #1101 from NeuralTrust/cursor/mcp-tool-naming-v2-0462
• ad1d9aa Merge pull request #1099 from NeuralTrust/cursor/stale-dcr-authorize-preflight-64d5
• 3b470da Merge pull request #1100 from NeuralTrust/cursor/store-tool-errors-eng-2171-8178
• 058c60c fix(mcp): resolve v2 names from the full upstream tool list
• 9f1d587 catalog: keep stored OAuth when the server URL differs
• 99170c0 fix(mcp): keep the 401 refresh retry for an oversized body
• 3470f95 fix(mcp): match Zoom 4741 only as a top-level error code
• 445cc8d fix(oauth): keep legacy DCR clients for existing refresh grants
• 8e88a28 fix(mcp): keep the response size limit when dropping error bodies
• a7c20a1 fix(oauth): narrow the legacy authorize preflight
• d84a1a5 fix(mcp): store the install naming version as int32
• 02332a0 fix(mcp): map Zoom error 4741 to a reconnect tool error
• 9e23c6a catalog: tell each Zoom server to use its own OAuth app
• f429c80 catalog: correct seed URLs, auth, regions, and scopes
• 9936475 fix(mcp): keep existing tool names and shorten names for new installs
• dd2ad54 fix(store): name install misses and dial failures
• e6e7d25 fix(oauth): replace a legacy DCR client the authorize endpoint rejects
• dd5b0e8 update agentgateway image tag to 2bcd8ac in k8s/overlays/dev
• 4c8cef0 update agentgateway image tag to a96ea13 in k8s/overlays/dev