v0.50.0

What's Changed

• Use self-repository syntax for local workflow refs by @rdimitrov in #6654
• Upgrade CI to Helm 4 by @renovate[bot] in #6614
• Update kubernetes dependencies by @renovate[bot] in #6589
• Simplify Renovate dependency groups by @rdimitrov in #6658
• Update module github.com/getsentry/sentry-go/otel to v0.49.0 by @renovate[bot] in #6592
• Update cli and ui libraries to v2 by @renovate[bot] in #6611
• Derive secrets encryption key with Argon2id by @rdimitrov in #6657
• Document request-claim fallback provenance by @rdimitrov in #6656
• Retry ID-token validation after OIDC refresh by @siddiqueirshad in #6559
• Enforce catalog provenance for plugin installs by @samuv in #6653
• Document key-pair signing trust limits by @samuv in #6661
• Update module github.com/cenkalti/backoff/v5 to v7 by @renovate[bot] in #6625
• Tolerate MethodNotFound for optional capabilities in ListCapabilities by @hellouz818 in #6660
• feat(authserver): support additional token-request params (RFC 8707 resource indicators) by @aron-muon in #6430
• feat(vmcp): stop session init stalling on backends that never service the notification stream by @aron-muon in #6633
• fix(vmcp): make the version poll interval per-Server, not a global by @aron-muon in #6644
• docs: point nine stale paths at the code that exists by @melbinjp in #6650
• Update module github.com/lestrrat-go/jwx/v3 to v4 by @renovate[bot] in #6626
• Use repo variable for Anthropic base URL by @eleftherias in #6672
• feat(authserver): accept ID-JAG assertions with a bound JWT-bearer handler by @aron-muon in #6677
• Add RFC 8628 device authorization grant support by @reyortiz3 in #6647
• Reduce buildProvider cyclomatic complexity by @reyortiz3 in #6680
• fix(operator): forward default Redis password to MCPServer and MCPRemoteProxy by @reyortiz3 in #6679
• Add lock-driven skill key rotation by @samuv in #6662
• Add plugin key rotation workflows by @samuv in #6663
• Add device flow verification page and DCR support by @reyortiz3 in #6682
• authserver/storage: add UpdateDCRCredentialsIfPresent by @tgrunnagle in #6674
• Release v0.50.0 by @toolhive-release-app[bot] in #6691

New Contributors

• @siddiqueirshad made their first contribution in #6559
• @hellouz818 made their first contribution in #6660

Full Changelog: v0.49.0...v0.50.0