v4.1.0-rc.1

Pre-release v4.1.0-rc.1

Target release: v4.1.0 (minor bump)
Branch: staging
Commit: 34b6f08

Commits since v4.0.0

• Merge pull request #208 from f5devcentral/feat/unified-cloud-k8s-access
• Merge pull request #203 from f5devcentral/fix/202-multus-openshift-namespace
• security(deps): bump js-yaml 4.3.1 -> 4.3.2 (P4 Security Audit npm HIGH)
• security(deps): bump gitpython 3.1.58 -> 3.1.59 (P4 Security Audit gate)
• security(trivy): suppress CVE-2026-56854 (x/crypto/ssh) until helm 3.22.0 stable
• Merge pull request #215 from f5devcentral/security/trivyignore-cve-2026-56854
• security(deps): bump js-yaml 4.3.1 -> 4.3.2 (P4 Security Audit npm HIGH)
• security(deps): bump gitpython 3.1.58 -> 3.1.59 (P4 Security Audit gate)
• security(trivy): suppress CVE-2026-56854 (x/crypto/ssh) until helm 3.22.0 stable
• fix(#208): fail closed on mismatched credential template + self-review nits
• fix(#202 review r1): shared ranked Multus DaemonSet picker; file the class follow-ups
• fix(k8s): load kubeconfig purely in-memory and isolate project credential templates
• fix(k8s): correct AKS AAD server app id and extract multi-cloud badge utilities
• fix(frontend): sync version to 4.0.0 in package-lock.json for npm audit
• chore(deps): bump GitPython to 3.1.59, mcp urllib3, and ignore CVE-2026-56854
• fix(deps): pin urllib3>=2.6.4 to remediate CVE-2026-21441
• chore(security): allowlist microsoft public azure cli client id in gitleaks
• fix(backend,frontend): fix boolean filter syntax and design tokens
• feat(frontend): add multi-cloud provider badges and flags for gke and azure
• fix(k8s): retry cloud OAuth token minting on corporate proxy SSL interception
• feat(k8s): support pure-Python GCP and Azure OAuth token generation with fallback
• fix(#202): deterministic Multus DaemonSet selection + document the pod-count scope (self-review)
• fix(#202): count Multus pods in the DaemonSet's namespace so OpenShift reports correctly