v0.88.0

What's Changed

📦 Dependencies

• ci(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #4886
• deps: bump fastapi from 0.137.0 to 0.138.0 by @dependabot[bot] in #4887
• deps: bump typos from 1.47.0 to 1.47.2 by @dependabot[bot] in #4888
• deps: bump huggingface-hub from 1.16.1 to 1.20.1 by @dependabot[bot] in #4889
• deps: bump anyio from 4.13.0 to 4.14.0 by @dependabot[bot] in #4890
• deps: bump json-repair from 0.60.1 to 0.61.0 by @dependabot[bot] in #4891

Other Changes

• docs(node-manager): TODO for allowlist-based element command retargeting by @griptapeops[bot] in #4863
• Respect optional references in macros by @cjkindel in #4866
• feat(library): inter-library dependencies via library_dependencies manifest field by @hutchinson in #4752
• feat(library): add request/response handler registration for libraries by @hutchinson in #4762
• fix(library-manager): surface metadata-load failures in library status by @griptapeops[bot] in #4869
• feat(workflows): add RefreshWorkflowRegistryRequest by @shhlife in #4877
• Add workspace configuration reference docs by @cjkindel in #4893
• fix(library): restore inter-library dependency feature lost in bad merge by @hutchinson in #4897
• Worker Project Inheritance by @cjkindel in #4871
• fix(init): handle object-form library entries when filtering old XDG paths by @collindutter in #4901
• add is_internal to workflow schema by @cjkindel in #4867
• perf: reduce Workflow Browser load time by eliminating redundant config and git lookups by @shhlife in #4895
• fix(mcp): shield engine dispatch so a client timeout doesn't cancel in-flight work by @collindutter in #4905
• chore: bump v0.87.1 by @collindutter in #4898
• chore: bump v0.87.2 by @collindutter in #4907
• feat(hf-param): replace download badges with inline dropdown UX by @shhlife in #4903
• Projects now inherit parent's workspace is not provided by @cjkindel in #4878
• chore: bump v0.87.3 by @collindutter in #4916
• feat(manifest): expose the aggregated model catalog by @collindutter in #4904
• feat(permissions): authorization checkpoint hooks for resolved-resource gating by @collindutter in #4899
• refactor(model-events): identify declared invocations by stable model_id by @collindutter in #4917

Full Changelog: v0.87.0...v0.88.0