v0.9.3

What's Changed

• Fix Helm chart OCI publish path to match original registry location by @ChrisJBurns in #3635
• Add structured status conditions for ToolConfigRef and ExternalAuthConfigRef validation by @ChrisJBurns in #3634
• Fix ServiceAccount secret accumulation on OpenShift by @ChrisJBurns in #3627
• Bump e2e test lifecycle timeout as a stopgap by @jhrozek in #3675
• Use ServerExtensions type in registry format converters by @rdimitrov in #3673
• Simplify authserver's upstream provider interface by @jhrozek in #3638
• Add SigV4 request signing for AWS API authentication by @jhrozek in #3658
• Make base images for protocol builds configurable. by @dmjb in #3662
• Refactor MCPRemoteProxy integration tests with shared helpers by @ChrisJBurns in #3679
• Accept ECDSA signing keys in JWKS token validation by @tgrunnagle in #3674
• fix(proxy): Rewrite Host header for backends with strict host validation by @jerm-dro in #3688
• Fix data race in TokenValidator.ensureOIDCDiscovered by @rdimitrov in #3693
• Update registry from toolhive-registry release v2026.02.08 by @github-actions[bot] in #3695
• Update module github.com/lestrrat-go/httprc/v3 to v3.0.4 by @renovate[bot] in #3694
• Update anthropics/claude-code-action digest to 6c61301 by @renovate[bot] in #3696
• Update module golang.org/x/oauth2 to v0.35.0 by @renovate[bot] in #3697
• Enable parallel runners for golangci-lint by @JAORMX in #3701
• Update registry from toolhive-registry release v2026.02.09 by @github-actions[bot] in #3699
• Exclude unhealthy backends from vMCP capability aggregation by @yrobla in #3642
• Update module golang.org/x/sys to v0.41.0 by @renovate[bot] in #3698
• Remove unused MCPServerConfig struct by @JAORMX in #3704
• Update module github.com/stacklok/toolhive-core to v0.0.3 by @renovate[bot] in #3703
• Rename MCPClient type to ClientApp by @JAORMX in #3700
• Rename mcpClientConfig to clientAppConfig by @JAORMX in #3707
• Remove redundant expectedCount field from discovery tests by @yrobla in #3705
• Add SKILL.md parser and skill directory validator by @JAORMX in #3702
• Add HTTP-based PDP authorizer by @ghaskins in #3315
• Fix imagePullSecrets propagation to ProxyRunner by @Sanskarzz in #3557
• Update module github.com/go-git/go-git/v5 to v5.16.5 by @renovate[bot] in #3710
• Release v0.9.3 by @stacklokbot in #3711

Full Changelog: v0.9.2...v0.9.3