v0.27.0

What's Changed

• Support CIMD as preferred OAuth client registration for thv run by @amirejaz in #5085
• Add --client flag to thv llm setup and teardown by @yrobla in #5144
• Carry forward upstream refresh token on re-authorization by @jhrozek in #5132
• Add follow-up CIMD E2E and unit tests by @amirejaz in #5130
• Add authserver DCR credential store and resolver by @tgrunnagle in #5042
• Allow standalone Redis in auth server storage by @reyortiz3 in #4994
• Fix golangci-lint failures from Go 1.26 linter upgrade by @reyortiz3 in #5161
• Fix flaky VirtualMCPServer composite tool watch integration test by @reyortiz3 in #5163
• Correct Gemini CLI LLM gateway config to proxy mode by @yrobla in #5142
• Add --anthropic-path-prefix flag and auto-probe for Envoy AI Gateway by @yrobla in #5174
• Phase 5: Dynamic Webhook Middleware Kubernetes Controller by @Sanskarzz in #4564
• Automate Gemini CLI .env injection for LLM gateway proxy setup by @yrobla in #5175
• Strengthen test assertions in llm_gateway_test.go using jsonPointerGet by @yrobla in #5187
• Update github/codeql-action digest to e46ed2c by @renovate[bot] in #5165
• Update aws-sdk-go-v2 monorepo by @renovate[bot] in #5166
• Preserve runconfig-checksum on pod template overrides by @jhrozek in #5149
• Populate LLMSetupNote for Gemini CLI to warn on --tls-skip-verify no-op by @yrobla in #5188
• Publish thv llm commands and regenerate CLI reference docs by @yrobla in #5189
• Set User-Agent on OAuth token refresh requests by @gkatz2 in #5168
• Wire authserver DCR resolver and add structured logs by @tgrunnagle in #5044
• Return *oauth2.RetrieveError from tokenexchange by @jhrozek in #5082
• Update module github.com/stacklok/toolhive-catalog to v0.20260504.0 by @renovate[bot] in #5118
• fix(#5063): deterministically order env vars in DeployWorkload by @nalditopr in #5064
• fix(api,cli): stop auto-deriving RFC 8707 resource indicator from URL by @peppescg in #5204
• Expose DCR config in operator CRD for OAuth2 upstreams by @tgrunnagle in #5069
• Install local skill builds by name when tag differs by @samuv in #5182
• Add identity extractor for OAuth2 token responses by @jhrozek in #5200
• Add Redis Cluster mode support to auth server storage by @reyortiz3 in #5153
• Release v0.27.0 by @toolhive-release-app[bot] in #5207

New Contributors

• @nalditopr made their first contribution in #5064

Full Changelog: v0.26.1...v0.27.0