v0.9.0

What's Changed

• Update stacklok/releaseo action to v0.0.2 by @renovate[bot] in #3521
• triggers docs at the end of the release workflow by @ChrisJBurns in #3523
• Add core OAuth authorization server interface and implementation by @jhrozek in #3513
• Limit RBAC permissions for inline mode VirtualMCPServers by @yrobla in #3504
• Update module github.com/onsi/gomega to v1.39.1 by @renovate[bot] in #3526
• Update anthropics/claude-code-action digest to 01e756b by @renovate[bot] in #3525
• Update module github.com/onsi/ginkgo/v2 to v2.28.1 by @renovate[bot] in #3527
• Implement ExcludeAll feature for VirtualMCPServer tool filtering by @JAORMX in #3499
• Fix flakey unit tests by @dmjb in #3512
• Add bulk group operations to workloads api tests by @dmjb in #3514
• Fix proxyMode for direct transports to match transportType by @amirejaz in #3532
• Drop unused env file field in runconfig by @dmjb in #2215
• Add E2E tests for secrets management by @dmjb in #3485
• Add generic PrefixHandlers to transport config by @tgrunnagle in #3524
• Add embeddedAuthServer type to MCPExternalAuthConfig CRD by @tgrunnagle in #3488
• Persist DCR client credentials for OAuth session restoration by @flfeurmou-indeed in #3418
• Add Embedded Auth Server Configuration Support to Operator by @tgrunnagle in #3520
• Update module github.com/cedar-policy/cedar-go to v1.4.1 by @renovate[bot] in #3536
• fix: add custom YAML unmarshalers for registry metadata types by @JAORMX in #3545
• Update anthropics/claude-code-action digest to 70e16de by @renovate[bot] in #3537
• Fix OAuth token refresh context cancellation by @gkatz2 in #3539
• Update API logging by @eleftherias in #3547
• Update logs and proxy CLI logging by @eleftherias in #3546
• Add OAuth authorization server integration tests by @jhrozek in #3531
• Release v0.9.0 by @stacklokbot in #3548

New Contributors

• @gkatz2 made their first contribution in #3539

Full Changelog: v0.8.3...v0.9.0