v0.9.0

Changelog

Features

• 836f9e4 feat(auth): collector OIDC mode 2 — trust the IdP for org assignment (#129)
• 23bd393 feat(fleet): manage collector inventory labels (#122)
• c0eea65 feat(metrics): publish a shepherd_build_info gauge (#123)
• 528a77e feat(mgmtapi): deprecate the /api REST shim with in-band headers (#125)
• d1bedbc feat(mgmtapi): per-service-account request rate limit (R6) (#130)
• c9c5718 feat(pipelines): Format and Validate buttons in the editor (#124)
• d994f8c feat(release): ship shepherd-mcp in the release archives (W11) (#132)
• b2feff0 feat(sso): show the collector-OIDC gate on the SSO page (#126)
• c6a417d feat(web): service accounts admin UI (#128)
• b5af7bd feat(web): tenant routes admin UI (#127)

Fixes

• d5f7a2d fix(chart): raise the kubeVersion floor to 1.29 (#131)

Other

• 3ccd394 build(deps): bump github/codeql-action/upload-sarif (#64)
• 6610552 build(deps): bump the minor-and-patch group across 1 directory with 3 updates (#56)
• 88ab71e build(deps): bump the minor-and-patch group across 1 directory with 5 updates (#63)