What's Changed

Full Changelog: v1.2.1...v1.2.2

v1.2.1

Handle upstream registration rate limits cleanly by @pacnpal in #92
Request offline_access by default for upstream OAuth by @pacnpal in #93
Give bridge-dependent supervisor unit tests a real start timeout by @pacnpal in #94

Full Changelog: v1.2.0...v1.2.1

Suppress unactionable Go stdlib CVEs in the upstream docker CLI binary by @pacnpal in #75
Add upstream OAuth authentication for remote MCP servers by @pacnpal in #76
Add a scheduled/on-demand Trivy scan so suppressions apply between releases by @pacnpal in #78
Derive config_hash with scrypt instead of a truncated SHA-256 by @pacnpal in #79
Allow manual dispatch of the Docker build-and-push workflow by @pacnpal in #77
Fix OAuth authorize URLs with pre-existing queries; run sign-in in a popup by @pacnpal in #80
Unified MCP endpoint with server picker (#82) + build toolchain in the image (#81) by @pacnpal in #83
Replace the /s/all aggregate with a /g group registry by @pacnpal in #84
feat(auth): oauth provider — RFC 9728 resource server for an external authorization server by @Doonut in #85
Add per-server setup scripts and startup recovery by @pacnpal in #88
Fix Docker workflow concurrency key by @pacnpal in #89
Block shell-wrapped Docker command bypass by @pacnpal in #87
chore(deps): bump mcp from 1.28.0 to 1.28.1 in /backend in the uv group across 1 directory by @dependabot[bot] in #91

Full Changelog: v1.1.0...v1.2.0