v0.14.0

What's Changed

• Wire embedded auth server into VirtualMCPServer converter and deployment by @jhrozek in #4383
• Implement upstream_inject strategy and SubjectProviderName by @jhrozek in #4390
• Update github/codeql-action digest to c10b806 by @renovate[bot] in #4415
• Update codecov/codecov-action digest to 75cd116 by @renovate[bot] in #4414
• Update anthropics/claude-code-action digest to 88c168b by @renovate[bot] in #4412
• Pin anthropics/claude-code-base-action action to e8132bc by @renovate[bot] in #4411
• Update kubernetes dependencies by @renovate[bot] in #4417
• Update module golang.ngrok.com/ngrok/v2 to v2.1.2 by @renovate[bot] in #4419
• Update module github.com/zalando/go-keyring to v0.2.8 by @renovate[bot] in #4418
• Update aws-sdk-go-v2 monorepo by @renovate[bot] in #4416
• Improve code-review-assist skill for clearer reviews by @jerm-dro in #4424
• Update sigstore/cosign-installer action to v4.1.1 by @renovate[bot] in #4420
• Update stacklok/releaseo action to v0.0.4 by @renovate[bot] in #4421
• Update module github.com/pelletier/go-toml/v2 to v2.3.0 by @renovate[bot] in #4422
• Update module github.com/stacklok/toolhive-catalog to v0.20260330.0 by @renovate[bot] in #4423
• Persist per-backend session IDs to transport metadata on session creation by @yrobla in #4403
• Default to :latest tag for OCI skill install references by @JAORMX in #4430
• Update module github.com/stacklok/toolhive-core to v0.0.13 by @renovate[bot] in #4439
• Unhide skill CLI commands and update toolhive-cli-user skill by @JAORMX in #4443
• fix(mcp): disable interactive OAuth in embedded MCP server handler by @peppescg in #4444
• Release v0.14.0 by @stacklokbot in #4445

Full Changelog: v0.13.1...v0.14.0