v0.6.15

What's Changed

• build(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.7 by @dependabot[bot] in #3637
• go.mod: bump gazette to latest for klauspost/compress CVE-2026-63209 by @skord in #3643
• billing: use recorded Stripe IDs for API and controller lookups by @jshearer in #3605
• Get single service account by catalogName by @GregorShear in #3642
• Rebuild on Go 1.26.10, latest gazette, and webpki-roots 1.0.10 by @skord in #3644
• docker: remove gcloud-crc32c from the agent image by @skord in #3645
• runtime-next: queue a shard's connector requests in a VecDeque by @mdibaiee in #3638
• go/protocols/fdb/tuple: decode integers without allocating by @mdibaiee in #3639
• agent: read alerting catalog stats from BigTable by @jshearer in #3607
• Control-plane invariants for custom connectors; built specs embed their connector Spec by @jgraettinger in #3634
• ops-catalog, agent: run more derivations on runtime-v2 by @williamhbaker in #3648
• Custom connectors groundwork: sources, validation, and connector precursors by @jgraettinger in #3647
• runtime-next: derive inference starts from an empty shape by @williamhbaker in #3655
• flow-client-next: /secret/decrypt requests send Content-Length by @jgraettinger in #3659
• MCP Oauth by @GregorShear in #3630
• billing: tenant billing contact has a list of emails by @jshearer in #3652
• Add OAuth vars and secret by @GregorShear in #3662
• control-plane-api: serve OpenMetrics from BigTable catalog stats by @jshearer in #3608
• mise: bump etcd to 3.5.35 by @skord in #3661
• mise: bump sops to 3.13.3 by @skord in #3663
• go.mod: bump etcd client to v3.6.14 by @skord in #3666
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.6 by @dependabot[bot] in #3667
• shuffle, gazette: fix forgotten-producer rollback and stalled fragment reads by @jgraettinger in #3674
• connector-init: drain a connector's stderr while its stdin is blocked by @mdibaiee in #3649
• parser: bump zip to 9 for CVE-2026-115905 by @skord in #3677
• flowctl: Migrate draft publish from postgrest to graphql by @adrian-estuary in #3675

Full Changelog: v0.6.14...v0.6.15