v0.48.0

What's Changed

• Support OIDC dynamic client registration by @jhrozek in #6544
• Fail closed on malformed protected list responses by @ChrisJBurns in #6553
• Fix issue-triage workflow model for Stacklok gateway by @danbarr in #6557
• Use Basic auth for OAuth2 upstreams by @jhrozek in #6543
• Honour a pinned cosign key on plugin sync and upgrade by @samuv in #6525
• Bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #6558
• Harden find tool response filtering by @ChrisJBurns in #6555
• Evict vMCP sessions when a backend is dropped by @tgrunnagle in #6549
• Add dial-control option to vMCP session factory by @tgrunnagle in #6547
• Fix setup-task version hints by @rdimitrov in #6565
• Update go.starlark.net digest to 89a6a09 by @renovate[bot] in #5779
• Update golang.org/x/exp/jsonrpc2 digest to 85c1c22 by @renovate[bot] in #6172
• Guard rotating refresh-token writes with compare-and-swap by @reyortiz3 in #6548
• Make proxy request read timeout configurable by @Sanskarzz in #6285
• Update dockerfile template base images by @renovate[bot] in #6584
• Update anthropics/claude-code-action action to v1.0.219 by @renovate[bot] in #6568
• Update module github.com/charmbracelet/x/ansi to v0.11.8 by @renovate[bot] in #6569
• Update module github.com/go-chi/chi/v5 to v5.3.2 by @renovate[bot] in #6570
• Update module github.com/gofrs/flock to v0.13.1 by @renovate[bot] in #6572
• Update slackapi/slack-github-action action to v3.0.5 by @renovate[bot] in #6575
• Update zizmorcore/zizmor-action action to v0.6.4 by @renovate[bot] in #6576
• Update dependency helm to v3.21.4 by @renovate[bot] in #6581
• Update dependency helm/helm to v3.21.4 by @renovate[bot] in #6582
• Update dependency kubernetes-sigs/kind to v0.33.0 by @renovate[bot] in #6583
• Update setup and language actions (major) by @renovate[bot] in #6620
• Update registry Docker tag to v3 by @renovate[bot] in #6619
• Update module github.com/lestrrat-go/jwx/v3 to v4 by @renovate[bot] in #6618
• Update module github.com/cenkalti/backoff/v5 to v7 by @renovate[bot] in #6617
• Update dependency node to v24 by @renovate[bot] in #6615
• Update module golang.org/x/sys to v0.48.0 by @renovate[bot] in #6605
• Update github/codeql-action action to v4.38.0 by @renovate[bot] in #6587
• Update ghcr.io/modelcontextprotocol/inspector Docker tag to v2 by @renovate[bot] in #6616
• Update module golang.org/x/time to v0.16.0 by @renovate[bot] in #6607
• Update module modernc.org/sqlite to v1.58.0 by @renovate[bot] in #6608
• Update testing libraries by @renovate[bot] in #6609
• Update module github.com/moby/moby/api to v1.56.0 by @renovate[bot] in #6594
• Update container build actions by @renovate[bot] in #6580
• Update module golang.ngrok.com/ngrok/v2 to v2.2.0 by @renovate[bot] in #6601
• Update module github.com/tidwall/gjson to v1.19.0 by @renovate[bot] in #6600
• Update module github.com/go-git/go-billy/v5 to v5.9.1 by @renovate[bot] in #6571
• Update auth and security libraries by @renovate[bot] in #6577
• Update codecov/codecov-action action to v7 by @renovate[bot] in #6612
• Update slackapi/slack-github-action action to v4 by @renovate[bot] in #6621
• Update aws-sdk-go-v2 monorepo - autoclosed by @renovate[bot] in #6578
• Update module golang.org/x/term to v0.46.0 by @renovate[bot] in #6606
• Update actions/setup-node action to v7 by @renovate[bot] in #6610
• Update module github.com/1password/onepassword-sdk-go to v0.4.1 by @renovate[bot] in #6590
• Update module golang.org/x/mod to v0.41.0 by @renovate[bot] in #6603
• Update module github.com/pressly/goose/v3 to v3.28.0 by @renovate[bot] in #6597
• Update module github.com/pelletier/go-toml/v2 to v2.4.3 by @renovate[bot] in #6596
• Update helm/kind-action action to v1.15.0 by @renovate[bot] in #6588
• Update module golang.org/x/sync to v0.23.0 by @renovate[bot] in #6604
• Update core workflow actions (major) by @renovate[bot] in #6613
• Update module golang.org/x/crypto to v0.57.0 by @renovate[bot] in #6602
• Update opentelemetry and observability by @renovate[bot] in #6574
• Update codespell-project/actions-codespell action to v2.4.3 by @renovate[bot] in #6579
• Update dependency helm to v3.22.0 by @renovate[bot] in #6623
• Update anthropics/claude-code-action action to v1.0.220 by @renovate[bot] in #6622
• Update module github.com/ory/x to v0.0.729 by @renovate[bot] in #6573
• Update ghcr.io/zizmorcore/zizmor Docker tag to v1.30.1 by @renovate[bot] in #6586
• Update module github.com/spiffe/go-spiffe/v2 to v2.8.1 by @renovate[bot] in #6598
• Update module github.com/moby/moby/client to v0.6.0 by @renovate[bot] in #6595
• Update module github.com/lestrrat-go/jwx/v3 to v3.3.0 by @renovate[bot] in #6593
• Update module github.com/testcontainers/testcontainers-go to v0.44.0 by @renovate[bot] in #6599
• Document AI plugin support by @JAORMX in #6627
• Update ghcr.io/stacklok/thv-registry-api Docker tag to v1.5.2 by @renovate[bot] in #6585
• Add SPIFFE client authentication dispatch by @jhrozek in #6562
• Require a discovery capability for key signing by @samuv in #6560
• Fail closed on keyed skill upgrade verdicts by @samuv in #6628
• Update module github.com/getsentry/sentry-go to v0.49.0 by @renovate[bot] in #6591
• Release v0.48.0 by @toolhive-release-app[bot] in #6631

Full Changelog: v0.47.1...v0.48.0