v0.28.1

What's Changed

• Use shared toolhive-core redis client for session storage by @reyortiz3 in #5324
• Bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 by @dependabot[bot] in #5330
• fix(operator): inject THV_SESSION_REDIS_PASSWORD for MCPServer by @dallinstevens in #5286
• fix: validate k8s export volume format by @immanuwell in #5319
• Update dependency kyverno/chainsaw to v0.2.15 by @renovate[bot] in #5297
• Update kyverno/action-install-chainsaw action to v0.2.15 by @renovate[bot] in #5298
• Update module github.com/pelletier/go-toml/v2 to v2.3.1 by @renovate[bot] in #5311
• Use events.k8s.io in registry-api Role by @rdimitrov in #5340
• Preserve fresh per-request identity in vMCP backend transports by @tgrunnagle in #5335
• Factor thv-operator main into app.Run; add proxyrunner Run helper by @tgrunnagle in #5332
• Add CIMD document fetch/validate and extend SSRF protections by @amirejaz in #5320
• Add default OBO handler hooks and vMCP/proxy converter stubs by @tgrunnagle in #5338
• Inject spawn seam in RunWorkloadDetached to stop orphan test processes by @tgrunnagle in #5346
• Release v0.28.1 by @toolhive-release-app[bot] in #5352

New Contributors

• @immanuwell made their first contribution in #5319

Full Changelog: v0.28.0...v0.28.1