v0.5.0-rc.3

What's Changed

• ci: Add org-wide project automation workflow by @rubambiza in #315
• 🐛 Start gRPC listener before credential resolution by @huang195 in #323
• refactor: Remove deprecated go-processor and migrate combined sidecar by @huang195 in #327
• Promote auth success logs from Debug to Info by @huang195 in #326
• ⚡ Shrink authbridge images: UBI9-micro for Envoy variant, distroless for lightweight by @huang195 in #324
• docs: document deployment modes, image variants, and port-stealing by @huang195 in #331
• build(deps): Bump envoy to v1.37.2 and ubi-minimal digest in authproxy by @pdettori in #321
• fix: Rename SERVICE_PORT to PORT in github-issue demo manifest by @huang195 in #334
• feat: Add dynamic log level via LOG_LEVEL env var and SIGUSR1 toggle by @huang195 in #335
• docs: Update weather demo — proxy-sidecar mode, debug logging by @huang195 in #337
• build(deps): Bump golang from 1.24.5-alpine to 1.26.2-alpine in /authbridge/authproxy by @dependabot[bot] in #329
• build(deps): Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #328
• Feat: Support gRPC Reflection API by @esnible in #344
• feat(demos): Advanced Weather + AuthBridge demo (token exchange, tool inbound, verify script) by @mrsabath in #343
• fix(demos): Kind CI rollout timeouts for weather advanced E2E by @mrsabath in #346
• authbridge(weather): fix Kind E2E (Deployment progress deadline) by @mrsabath in #347
• Feat: Collect and serve Kagenti Authbridge statistics and configuration by @esnible in #349
• Style: Pass 'make lint' by @esnible in #353
• build(deps): Bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in #350
• build(deps): Update pyyaml requirement from >=6.0 to >=6.0.3 by @dependabot[bot] in #351
• feat: Add pipeline package with typed extension slots by @huang195 in #358
• feat: Wire built-in plugins into pipeline and listeners by @huang195 in #359
• fix: Pin cryptography<47 to fix ARM64 crash in client-registration by @huang195 in #360
• feat: Add MCP parser plugin and body access infrastructure by @huang195 in #361
• fix: Correct ext_proc body-phase responses and enable allow_mode_override by @huang195 in #362
• refactor(mcp-parser): Generic method handling and improved logging by @huang195 in #364
• feat: Add A2A parser plugin for inbound request inspection by @huang195 in #363
• feat: Add inference-parser plugin for outbound LLM traffic by @huang195 in #365
• build(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #368
• feat: Add session-aware pipeline infrastructure by @huang195 in #366
• feat: Add response-side parsers and session enrichment by @huang195 in #370
• feat: HTTP session events API (snapshots + SSE stream) by @huang195 in #371
• feat: abctl — interactive TUI for session events by @huang195 in #372
• feat: Capture A2A response summary in session events by @huang195 in #373
• feat(abctl): Identity banner + token columns + plugin state helpers by @huang195 in #374
• fix(authbridge): robust credential provisioning with continuous polling by @pdettori in #375
• feat(pipeline): Structured rejections + lifecycle hooks + plugin spec docs by @huang195 in #377
• feat(plugins): Per-plugin config + /readyz aggregation + /stats merge by @huang195 in #378
• CI: Add PR title verifier workflow by @rubambiza in #355
• feat(plugins): Add keycloak_url + keycloak_realm to jwt-validation for internal JWKS derivation by @huang195 in #383
• feat(session): Plugin invocation contract + 5-value action vocabulary + abctl row-per-plugin renderer by @huang195 in #385
• refactor(plugins): Open plugin registry + pctx.Record helpers (DX improvements) by @huang195 in #386
• feat(pipeline): Config hot-reload via fsnotify + atomic pipeline swap by @huang195 in #388
• feat(pipeline): Body mutation via WritesBody capability + SetBody helpers by @huang195 in #389
• refactor(pipeline): Detype framework + consolidate single-owner authlib packages by @huang195 in #392
• feat(authlib): Add ContentSource capability for guardrail plugins by @huang195 in #393
• feat: Guardrail prerequisites — outbound deny recording + on_error policy by @huang195 in #395
• feat: Add token broker plugin by @davidhadas in #391
• feat(pipeline): Add Scheme to Context and plumb through listeners by @huang195 in #399
• feat: Plugin relationship declarations + token-exchange/token-broker claim migration by @huang195 in #400
• feat(pipeline): Add Finisher lifecycle hook for stateful plugin cleanup by @huang195 in #401
• feat(cmd): Add authbridge-proxy and authbridge-envoy lite binaries by @huang195 in #407
• fix: a2a-parser reads contextId from params.message by @huang195 in #408

New Contributors

• @esnible made their first contribution in #344
• @davidhadas made their first contribution in #391

Full Changelog: v0.5.0-alpha.2...v0.5.0-rc.3