v0.10.1

What's Changed

• Migrate pkg/vmcp from logger shim to slog by @rdimitrov in #3883
• Fix slog key names, remove secret logging, and clean up messages (follow up to 3864) by @jhrozek in #3887
• Add EmbeddingServerRef to VirtualMCPServer for optimizer integration by @aponcedeleonch in #3839
• Migrate cmd/ and test/e2e/ to slog, remove pkg/logger shim by @rdimitrov in #3888
• Add per-skill concurrency protection to install/uninstall by @JAORMX in #3851
• Implement OCI Build and Push for skill service by @JAORMX in #3894
• Relocate monitor and errors to runtime package by @JAORMX in #3843
• Add operator controller and runner integration for Redis storage by @tgrunnagle in #3823
• Add real TEI embedding client for semantic tool discovery by @aponcedeleonch in #3844
• Add Session and SessionFactory interfaces for vMCP (Phase 1) by @yrobla in #3882
• Update .gitignore to include vmcp directory by @rdimitrov in #3904
• Add configurable search parameters to optimizer by @aponcedeleonch in #3896
• Rename toolhive-registry to toolhive-catalog by @rdimitrov in #3907
• Add OCI pull-based install flow for skills by @JAORMX in #3898
• Add Flatpak install method to desktop CLI validation by @kantord in #3895
• Update module github.com/modelcontextprotocol/registry to v1.4.1 by @renovate[bot] in #3755
• Update module modernc.org/sqlite to v1.46.1 - autoclosed by @renovate[bot] in #3857
• Move permissions and registry packages from toolhive to toolhive-core by @rdimitrov in #3912
• Update module github.com/aws/aws-sdk-go-v2/config to v1.32.9 by @renovate[bot] in #3856
• Update helm/kind-action action to v1.14.0 by @renovate[bot] in #3849
• Log when authz response filter skips on auth failure by @reyortiz3 in #3921
• Remove embedded registry.json in favour of toolhive-catalog Go package by @rdimitrov in #3926
• Inject W3C Trace Context into vMCP backend HTTP requests by @ChrisJBurns in #3814
• Remove /verifier in favour of one coming from toolhive-core by @rdimitrov in #3929
• Resolve temp dir to real path in skills and installer unit tests by @reyortiz3 in #3928
• Update aquasecurity/trivy-action action to v0.34.1 by @renovate[bot] in #3927
• Update module github.com/google/go-containerregistry to v0.21.0 by @renovate[bot] in #3910
• Update anthropics/claude-code-action digest to edd85d6 - autoclosed by @renovate[bot] in #3903
• Update goreleaser/goreleaser-action action to v7 by @renovate[bot] in #3931
• Update module github.com/pressly/goose/v3 to v3.27.0 - autoclosed by @renovate[bot] in #3934
• Update module github.com/stacklok/toolhive-catalog to v0.20260223.0 by @renovate[bot] in #3935
• Update aws-sdk-go-v2 monorepo by @renovate[bot] in #3938
• Update anthropics/claude-code-action digest to 35a9e02 by @renovate[bot] in #3941
• Update module github.com/google/go-containerregistry to v0.21.1 by @renovate[bot] in #3947
• Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 by @dependabot[bot] in #3956
• Make MCPServer controller hands-off on replicas by @JAORMX in #3955
• Fix flaky DAG executor timing and AcceptHeaderValidation tests by @JAORMX in #3954
• Update module github.com/go-git/go-billy/v5 to v5.8.0 by @renovate[bot] in #3951
• Improve Renovate dependency update configuration by @rdimitrov in #3939
• Reflect the changes in the verifier by @rdimitrov in #3933
• Add documentation artifacts as release assets by @rdimitrov in #3950
• Upgrade golang.org/x/net to v0.51.0 by @reyortiz3 in #3959
• Validate OCI tags from all sources in Build (follow up to 3894) by @jhrozek in #3897
• Fix operator e2e CI failures and spurious deployment updates by @aponcedeleonch in #3961
• Remove auto-discovery and default group migrations from startup by @amirejaz in #3948
• Address PR review feedback on vmcp/session by @yrobla in #3905
• Distinguish container restarts from exits in monitor by @gkatz2 in #3937
• Release v0.10.1 by @stacklokbot in #3965

New Contributors

• @kantord made their first contribution in #3895
• @reyortiz3 made their first contribution in #3921

Full Changelog: v0.10.0...v0.10.1