Release request: the localhost redirect_uri fix (#6215) is merged but unreleased

[alex-feel]

#6215 (localhost redirect_uri handling in the embedded auth server) merged on Aug 19, right after the v0.44.0 cut, so no published release carries it yet. Without it, CIMD clients that register portless http://localhost/callback redirects (Claude Code is the one we hit) cannot get past /oauth/authorize on the embedded auth server.

We run the operator with the embedded auth server in front of an internal MCP gateway, and this fix is the piece we are waiting on. Main is 49 commits ahead of v0.44.0 now. I saw the v0.45.0 release PR (#6431) go up yesterday and close unmerged, so I wanted to ask rather than assume: is a new cut planned soon?

Offer, in case it helps: the day a release ships, we can run the full flow against a live deployment (real Claude Code client, embedded AS with Redis storage, CIMD registration) and report the result here.

[blkt]

Thanks @alex-feel. This is already resolved: v0.45.0 published on 2026-08-26 at 13:23 UTC and contains #6215 (merge commit 7af27d3). The release notes call out the Claude Code case specifically.

Two things worth knowing before you upgrade. v0.45.0 removes registration.LoopbackClient and changes the return semantics of what replaces it, and thv serve now enforces Origin and Content-Type. Neither relates to your fix but both could affect you.

Closing as shipped.