Skip to content

fix(deps): update module github.com/giantswarm/mcp-oauth to v1#949

Merged
teemow merged 2 commits into
mainfrom
renovate/github.com-giantswarm-mcp-oauth-1.x
Jul 5, 2026
Merged

fix(deps): update module github.com/giantswarm/mcp-oauth to v1#949
teemow merged 2 commits into
mainfrom
renovate/github.com-giantswarm-mcp-oauth-1.x

Conversation

@renovate

@renovate renovate Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/giantswarm/mcp-oauth v0.18.10v1.0.0 age confidence

Release Notes

giantswarm/mcp-oauth (github.com/giantswarm/mcp-oauth)

v1.0.0

Compare Source

Added

Full Changelog: giantswarm/mcp-oauth@v0.18.10...v1.0.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner July 2, 2026 16:07
@renovate renovate Bot added dependencies renovate This is an automated PR by RenovateBot labels Jul 2, 2026
@renovate renovate Bot requested a review from teemow July 2, 2026 16:07
@renovate renovate Bot force-pushed the renovate/github.com-giantswarm-mcp-oauth-1.x branch from fb022a9 to 84deacf Compare July 3, 2026 08:02
@teemow

teemow commented Jul 4, 2026

Copy link
Copy Markdown
Member

AI rescue failed (klaus): mcp-oauth v1 migration is larger than a dependency rescue. Partial fix pushed to branch wip/mcp-oauth-v1-migration: threads the --extra-ca-file CA pool explicitly into mcp-oauth v1's permissive JWKS/token-exchange/OIDC clients (v1 no longer reads http.DefaultTransport CAs). Two further v1 behavior changes still break the localmint broker scenarios: token exchange now rejects requests without client_id (invalid_request: client_id is required), and x_cluster-b-backend_whoami is not registered in the discovery scenario (4/5 steps pass). The rescue agent ran out of API credits mid-task.

mcp-oauth v1 no longer reads CA trust from http.DefaultTransport; its
permissive JWKS / OIDC-discovery / token-exchange clients need an explicit
*x509.CertPool. Build the pool once from --extra-ca-file via the new
pkg/tlsutil.LoadCAPool and hand it to the Dex provider, the forwarded-token
JWKS client, and each trusted issuer, so both trust paths verify against an
identical pool.

Co-authored-by: Cursor <cursoragent@cursor.com>
@teemow teemow merged commit 22ca0ff into main Jul 5, 2026
14 checks passed
@teemow teemow deleted the renovate/github.com-giantswarm-mcp-oauth-1.x branch July 5, 2026 07:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies renovate This is an automated PR by RenovateBot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant