v0.3.0

Changelog

• 97997c1 chore(release): cut v0.3.0
• ad3fbba docs(readme): add the Homebrew install path and refresh the verify example
• 52f85da chore(deps): bump the go-deps group with 2 updates
• f168aba chore(deps): bump anthropics/claude-code-action in the actions group
• f98351e docs(release): correct the reason this is a Formula and not a Cask (#36)
• db16ce6 feat(release): publish a Homebrew formula to kanywst/homebrew-tap
• a23c869 chore(deps): bump the actions group with 2 updates
• 0982a50 chore(deps): bump github.com/open-policy-agent/opa in the go-deps group
• 27e432d chore(deps): bump the actions group with 3 updates
• 24cbe66 chore(deps): bump golang in the docker group across 1 directory

v0.2.1

Changelog

• e0b950b fix(registry): name the server in the image, and cut v0.2.1
• 1c74746 fix(registry): put the OCI tag in the identifier, and validate against the schema
• 1a7f242 fix(registry): keep the server.json description under the registry's limit
• 9c553a1 fix(release): call the registry publish instead of waiting for a trigger

v0.2.0

Changelog

• d2911d8 fix(release): give the release Dockerfile the context goreleaser actually hands it
• e93ae3e docs: cut the v0.2.0 changelog section
• a6878bf chore(deps): bump the actions group with 2 updates
• c67c3aa fix: bound the query result, and stop overclaiming in SECURITY.md
• 07dcfa0 fix: bound trace collection, not just the trace that is returned
• 9ccb9fa fix: bound print() output from an evaluated policy
• 6f2a228 docs: rewrite the README and add the community health files
• d851fed ci: check the shell, the image and the registry manifest
• 6a9ffb1 build: publish a container image and an MCP registry manifest
• fc43cbe feat: bring the server up to AuthZEN 1.0 final and sandbox policy evaluation
• 1da6499 chore: ignore Claude Code and local agent files
• aafc633 ci: add the Claude review workflow

v0.1.0

Changelog

• 0105033 fix(release): sign with the Sigstore bundle format cosign 3.x expects
• 328dcaf feat: merge mcp-authzen into mcp-opa-authz
• e8a82f7 chore(deps): bump github.com/mark3labs/mcp-go in the go-deps group
• 2de3021 chore(deps): bump github.com/mark3labs/mcp-go in the go-deps group
• a355049 fix(deps): bump go directive to 1.26.6 for stdlib security fixes
• 5d34930 fix(deps): bump go to 1.26.6 for stdlib CVEs
• a6a99b5 chore(deps): bump google/osv-scanner-action/osv-scanner-action
• c8a6040 chore(deps): bump google/osv-scanner-action/osv-scanner-action
• 6b4f903 chore(deps): bump github.com/open-policy-agent/opa in the go-deps group
• 88baec4 chore(deps): bump github.com/mark3labs/mcp-go in the go-deps group
• b8ec1a7 chore(deps): bump actions/checkout in the actions group
• f9e2053 chore(deps): bump actions/checkout
• db72e03 chore(deps): bump github.com/mark3labs/mcp-go
• 08b2b6e fix(deps): bump golang.org/x/text to 0.40.0 for GO-2026-5970 (#15)
• 724781a chore(deps): bump actions/setup-go in the actions group
• 4a16485 chore(deps): bump actions/setup-go in the actions group
• 4396a7f chore(deps): bump github.com/mark3labs/mcp-go
• 87cdb97 chore(deps): bump github.com/mark3labs/mcp-go
• ff1b917 ci: let osv-scanner resolve a Go toolchain so reachability analysis runs
• 6efc80d chore: bump Go to 1.26.5 to fix GO-2026-5856 in crypto/tls
• 75520dc fix(deps): bump go directive to 1.26.5 for GO-2026-5856
• 9a57aaa chore(deps): bump github.com/open-policy-agent/opa in the go-deps group
• 1df02ab chore(deps): bump golangci/golangci-lint-action in the actions group
• c16903f chore(deps): bump the actions group with 2 updates
• 8fbed94 chore(deps): bump github.com/mark3labs/mcp-go in the go-deps group
• b298b37 chore(deps): bump the actions group with 2 updates
• 9467880 chore(deps): bump the go-deps group with 2 updates
• 392bb2c chore(deps): bump the actions group with 3 updates
• ea82a58 chore(deps): bump github.com/mark3labs/mcp-go in the go-deps group
• 30ce2b2 chore(deps): bump actions/checkout in the actions group
• 4c78fbf chore(deps): bump github.com/mark3labs/mcp-go in the go-deps group
• dd84950 chore(deps): bump actions/checkout in the actions group
• be36d6e chore(deps): bump github.com/open-policy-agent/opa
• 37fb87d chore(deps): bump actions/checkout
• 0f55ca6 fix(vuln): bump go directive 1.26.3→1.26.4 to clear GO-2026-5037/5039 stdlib findings
• e7d48de chore(deps): bump actions/checkout
• 19ab8de chore(deps): bump Go to 1.26.4 (GO-2026-5039, GO-2026-5037)
• 2edfee0 chore(deps): bump github.com/open-policy-agent/opa in the go-deps group
• ae7269b chore(deps): bump the actions group with 4 updates
• 1e1fb20 chore(deps): bump the actions group with 4 updates
• 987cc01 chore(deps): bump x/crypto v0.50→0.52 and x/sys v0.43→0.45 to clear osv-scanner findings
• db2c1a7 ci(vuln): drop --skip-git arg (removed in osv-scanner v2)
• befc86c ci(vuln): correct osv-scanner-action path (uses subaction at osv-scanner-action/action.yml, not repo root)
• 467196c ci: add smoke / vuln / actionlint / coverage jobs
• 657e3c6 chore(release): use go mod verify (non-mutating) in goreleaser before hooks for reproducible releases
• 7504d1d chore: address PR review feedback
• c97a82f ci: pin golangci-lint v2.12.2 (action v9) — v1.64 was built with Go 1.24, can't read go1.26 modules
• 287d6bd feat: add examples, smoke test, Makefile, dependabot
• 01fa3f4 ci(vuln): drop --skip-git arg (removed in osv-scanner v2)
• 342de73 ci(vuln): correct osv-scanner-action path (uses subaction at osv-scanner-action/action.yml, not repo root)
• 39d661a ci: add smoke / vuln / actionlint / coverage jobs
• 57bba7e chore: address remaining CodeRabbit review feedback
• 8e7429c chore: address PR review feedback
• 2db3258 ci: pin golangci-lint v2.12.2 (action v9) — v1.64 was built with Go 1.24, can't read go1.26 modules
• 608fd79 chore: smoke test, Makefile, dependabot; README de-fluff
• bb08c68 feat: initial MCP server fronting an OpenID AuthZEN 1.0 PDP
• 7901528 docs: initial README, LICENSE, and lint config
• 6041a54 feat: initial MCP server exposing OPA Rego evaluation