v0.0.50

What's Changed

• test(oidc): make the Kubernetes token-rotation check deterministic by @rdimitrov in #2436
• ci: run analysis and Studio work in parallel jobs by @rdimitrov in #2430
• ci: share one compile across microVM release stamp builds by @rdimitrov in #2433
• ci: restore the race test cache by prefix and save it only from main by @rdimitrov in #2437
• ci(k8s-e2e): shard execution qualification and cut provisioning time by @rdimitrov in #2432
• fix(ci): restrict Kubernetes release skips to the release App by @rdimitrov in #2439
• feat(permissions): one named permission-mode vocabulary and two admission gates by @aponcedeleonch in #1935
• ci: save Go caches only from main and stop cancelled Test runs by @rdimitrov in #2440
• feat(identitybroker): add validated startup foundation for the agent identity broker by @ChrisJBurns in #2442
• feat(identitybroker): add the identity broker interface and stand-in broker by @ChrisJBurns in #2443
• fix(identitybroker): refuse registration under another owner by @ChrisJBurns in #2449
• feat(identitybroker): start the identity broker in mecak8s behind an authentication boundary by @ChrisJBurns in #2450
• test(identitybroker): add the offline agent identity harness by @ChrisJBurns in #2459
• ci(release): build execution images on main, not on every release by @rdimitrov in #2435
• fix(security): require Go 1.27.3 and patched vite in the TypeScript SDK by @rdimitrov in #2466
• chore(deps): update typescript sdk by @renovate[bot] in #2244
• fix(sdk): follow the Playwright and @types/node pins from the SDK update by @rdimitrov in #2469
• ci: remove duplicate checks and build mecated once by @rdimitrov in #2468
• chore(deps): consolidate Renovate into three dependency buckets by @rdimitrov in #2471
• fix(scheduler): record fire events under the session lease by @rdimitrov in #2426
• chore(deps): consolidate Renovate Go and Studio updates by @rdimitrov in #2472
• feat(identitybroker): add broker sessions to the real identity broker and run it in mecak8s by @ChrisJBurns in #2465
• feat(mecak8s): add scheduler.enabled chart value by @rdimitrov in #2427
• feat(identitybroker): open and close broker sessions with Mecatl sessions by @ChrisJBurns in #2467
• fix(identitybroker): address the slice 1 review follow-ups by @ChrisJBurns in #2473
• feat(identitybroker): register agents and issue their credentials by @ChrisJBurns in #2476
• fix(identitybroker): address the agent registration review follow-ups by @ChrisJBurns in #2477
• fix(agent): name the provider stop reason on stop-only errors by @rdimitrov in #2431
• build(deps): require engine v0.18.0 and pin Task in CI by @rdimitrov in #2478
• build(deps): declare the Go 1.27 floor without a patch version by @rdimitrov in #2480
• docs(engine): record the Go 1.27 floor without a patch version by @rdimitrov in #2481
• build(deps): require engine v0.18.1 and drop the inherited 1.27.3 floor by @rdimitrov in #2482
• build(deps): declare go 1.27 in every module by @rdimitrov in #2484
• feat(identitybroker): register the agent at session start by @ChrisJBurns in #2479
• Release v0.0.50 by @toolhive-release-app[bot] in #2485

Full Changelog: v0.0.49...v0.0.50