v0.22.0-alpha1

What's Changed

• feat: allow multi-user servers to have user-defined headers by @thedadams in #6469
• chore: update user-ui pnpm@v11.x+ by @ivyjeong13 in #6482
• fix: filter out coming soon model providers by @ivyjeong13 in #6517
• Add user-configurable MCP startup timeouts by @calvinmclean in #6399
• chore: add build step for helm chart by @thedadams in #6521
• chore: migration from nanobot-ai/nanobot to obot-platform/nanobot by @thedadams in #6527
• fix: ensure user has access to mcp-connect URL by @thedadams in #6528
• Add workflow to post user-reported security advisories to Slack by @cjellick in #6536
• Revert "Add workflow to post user-reported security advisories to Slack" by @cjellick in #6537
• fix: allow access to mcp-connect URLs with extra path by @thedadams in #6539
• fix: allow users to access system MCP servers by @thedadams in #6541
• fix: indicate when multi-user server needs configuration by @thedadams in #6538
• fix: only create multi-user MCP after user config by @thedadams in #6535
• chore: update dependabot alerted packages by @ivyjeong13 in #6540
• fix: move published artifacts authorization out of API layer by @thedadams in #6542
• feat: add obot scan to inventory local AI client config by @njhale in #6530
• docs: overview: provide more information about authentication by @g-linville in #6546
• docs: add bootstrap token to overview by @g-linville in #6549
• fix: ensure passthrough headers are always set for multi-user servers by @thedadams in #6532
• feat: add OAuth debug information to the UI by @thedadams in #6526
• fix: correct backgrounds for scanned config files by @njhale in #6560
• feat: add ability to reauthenticate oauth flows in the UI by @thedadams in #6557
• fix: display a better error message for multi-user MCP servers by @thedadams in #6552
• fix: audit logs filters fix & server instances link fix by @ivyjeong13 in #6533
• fix: change login route to /mcp-servers & sidebar navigation layout adjustment by @ivyjeong13 in #6566
• enhance: make dynamic client expiration configurable by @thedadams in #6570
• fix: deep-link scan observations by row id instead of slice index by @njhale in #6574
• fix: prefer catalog token, try anonymous otherwise by @calvinmclean in #6573
• feat: Replace Ollama with generic provider by @calvinmclean in #6522
• feat: External Secret Integration for MCP Servers by @calvinmclean in #6484
• chore: dependabot updates for ui by @ivyjeong13 in #6581
• enhance: additional device management pages by @ivyjeong13 in #6562
• enhance: store CLI auth tokens in OS keychain by @g-linville in #6582
• chore: add OAuth client expiration configuration to docs and chart by @thedadams in #6585
• fix: remove configs from Connect To Server & reference doc links by @ivyjeong13 in #6597
• feat: add setup and skills commands to Obot CLI by @g-linville in #6599

Full Changelog: v0.21.0...v0.22.0-alpha1