v0.2.3

Container image

docker pull ghcr.io/contextforge-org/contextforge-web-ui:0.2.3

Signed with Cosign (keyless OIDC) — verify with:

cosign verify ghcr.io/contextforge-org/contextforge-web-ui@sha256:10d122b3b44e65a8c7f23d8d6a0817317f7a30aedd52d1c54979c7e493a9cb29 \
  --certificate-identity-regexp 'https://github.com/contextforge-org/contextforge-web-ui/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Built for linux/amd64 and linux/arm64. SBOM (SPDX) attached below.
See DOCKER.md for compose/Helm usage.

What's Changed

• feat: Public SSO status probe by @gcgoncalves in #142
• feat: OIDC discovery client by @gcgoncalves in #143
• feat: Login page SSO button by @gcgoncalves in #144
• feat: Truncate URLs in center by @gcgoncalves in #146
• feat: add read-only SSO settings tab by @gcgoncalves in #147
• fix: MCP Server actions RBAC by @gcgoncalves in #149
• [UI-REWRITE] Add a shared MCP server status indicator by @a-effort in #130
• feat: BFF SSO login endpoints by @gcgoncalves in #148
• feat: SSO token exchange and resolution libs by @gcgoncalves in #154
• feat: Delay cancel button for live tool invokes by @byrnec30 in #155
• fix: keep sidebar team switcher in sync with team changes by @marekdano in #157
• feat: SSO callback route and session wiring by @gcgoncalves in #156
• feat: SSO token refresh (Keycloak refresh_token) by @gcgoncalves in #158
• feat: show catalog add failure error on the card by @a-effort in #153
• refactor: extract shared Callout for inline warnings by @marekdano in #161
• feat(tools): redesign Tools drawer try-it experience by @marekdano in #151
• fix: remove textarea min-height overrides so fields auto-size and shrink by @marekdano in #162
• feat(tls): add cert generation script and cert_init service by @marekdano in #164
• feat: add nginx_tls service and TLS compose scripts by @marekdano in #165
• feat: complete MCP OAuth form quick wins by @vishu-bh in #167
• refactor: make status indicator presentation reusable by @a-effort in #160
• fix(ui): add caller-scoped OAuth status handling by @vishu-bh in #150
• 5536 feature view accept pending invitations by @a-effort in #122
• fix(tools): remove duplicate preview arguments by @0717lee in #166
• feat: virtual server add source step by @a-effort in #131
• feat: wire SSO token refresh into sessionAuth by @gcgoncalves in #163
• tests: SSO flow Playwright tests by @gcgoncalves in #168
• feat(tls): trust the self-signed cert for BFF outbound calls by @marekdano in #170
• feat(tls): add TLS smoke test script by @marekdano in #169
• feat: add TLS variant of the e2e stack by @marekdano in #172
• feat: add TLS smoke workflow by @marekdano in #173
• fix(e2e): resolve real-API-mode spec failures by @marekdano in #175
• chore(deps): update dependencies, catch specific high vuln deps by @brian-hussey in #179
• fix: truncate resource preview chip picker and add search by @marekdano in #176
• feat(gateways): remove components from a virtual server's details panel by @gcgoncalves in #182
• feat(tools): let REST tools declare read-only/destructive behavior by @gcgoncalves in #183
• feat(gateways): allow adding REST tools to virtual servers by @gcgoncalves in #184
• fix(gateways): remove virtual server tool try-it feature flag by @marekdano in #185
• chore: refresh openapi.json to API v1.0.11+9b2156 by @gcgoncalves in #186
• refactor(prompts,resources): use shared Field in args forms by @CloudCorpRecords in #181
• Bump version by @gcgoncalves in #189

New Contributors

• @byrnec30 made their first contribution in #155
• @CloudCorpRecords made their first contribution in #181

Full Changelog: v0.2.2...v0.2.3