v0.5.0

GraphNest v0.5.0

Compatibility: pre-1.0 pilot; Kubernetes 1.25 or newer. Migrations 031 and
032 add defaulted columns to api_tokens; no configuration changes are needed.
Security: images include SBOMs, provenance, and GitHub attestations. Fixes
delegation-only token confinement after owner demotion and forbids delegated
tokens from delegating again; updates OTLP trace exporters to v1.46.0
(GHSA-8wmf-6v46-5gfg).

Immutable artifacts

• ghcr.io/balcsida/graphnest/application@sha256:945e4db2578f30d8678b5a64e76da2b5e3818bb92c84d53f1dfee7b30019879d
• ghcr.io/balcsida/graphnest/node@sha256:97d328c2852f2af71b31ed5c72b6a95365725e371a4424b9bdaaf63577e6dabb
• oci://ghcr.io/balcsida/graphnest/charts/graphnest:0.5.0@sha256:1b0557db18ab53cf704efe4fe41297564ee3a0a3934412dcb12c8bcf4263eaec

Verification

gh attestation verify "oci://ghcr.io/balcsida/graphnest/application@sha256:945e4db2578f30d8678b5a64e76da2b5e3818bb92c84d53f1dfee7b30019879d" --repo "balcsida/graphnest"
gh attestation verify "oci://ghcr.io/balcsida/graphnest/node@sha256:97d328c2852f2af71b31ed5c72b6a95365725e371a4424b9bdaaf63577e6dabb" --repo "balcsida/graphnest"
gh attestation verify "graphnest-0.5.0.tgz" --repo "balcsida/graphnest"

What's Changed

• fix(oauth): let browsers complete MCP consent by @balcsida in #90
• fix(webui): make proxy errors on SCIP upload visible by @balcsida in #92
• fix: repair MCP search budget and graph symbol lookup by @balcsida in #93
• Bump the "dependencies" group with 4 updates across multiple ecosystems by @dependabot[bot] in #99
• build(deps): bump otlptrace exporters to 1.46.0 in /tools by @balcsida in #100
• feat(graph): expose discovery and exploration through REST and MCP by @balcsida in #91
• feat(auth): delegation-only administrator tokens for CI upload brokers by @balcsida in #94
• Release v0.5.0 by @balcsida in #101

Full Changelog: v0.4.3...v0.5.0