v0.9.4

What's Changed

• Address miscellanious post-merge review feedback for AWS STS role mapper by @jhrozek in #3708
• Use CEL variable binding instead of string interpolation for claim matching by @jhrozek in #3709
• Revert "Release v0.9.3" by @rdimitrov in #3716
• Create GitHub release even when tag already exists by @ChrisJBurns in #3717
• Add external resource integration tests for MCPRemoteProxy by @ChrisJBurns in #3685
• Make role mapping Priority in AWS STS config optional with *int by @jhrozek in #3715
• Release v0.9.3 by @stacklokbot in #3718
• Add default resource limits to VirtualMCPServer vmcp container by @jerm-dro in #3689
• Add AWS STS token exchange for OIDC-to-AWS credential conversion by @jhrozek in #3659
• chore(vMCP): Add tool call labels to vMCP telemetry metrics by @jerm-dro in #3687
• Update aws-sdk-go-v2 monorepo by @renovate[bot] in #3719
• Update module golang.org/x/crypto to v0.48.0 by @renovate[bot] in #3722
• Update module golang.org/x/mod to v0.33.0 by @renovate[bot] in #3723
• Add W3C Trace Context propagation via MCP _meta by @ChrisJBurns in #3682
• Enable OIDC provider support in the embedded auth server by @jhrozek in #3720
• Update registry from toolhive-registry release v2026.02.10 by @github-actions[bot] in #3736
• Add UseLegacyAttributes flag to telemetry config by @ChrisJBurns in #3729
• Gate legacy span attributes behind UseLegacyAttributes flag by @ChrisJBurns in #3747
• Rename span attributes to MCP OTEL semantic conventions by @ChrisJBurns in #3748
• Add network/client span attributes and fix span status per OTEL semconv by @ChrisJBurns in #3750
• Add mcp.server.operation.duration metric per OTEL MCP semantic conventions by @ChrisJBurns in #3752
• Add SigV4 signing middleware for AWS STS token exchange by @jhrozek in #3730
• adds claude skill for setting up otel in kind by @ChrisJBurns in #3725
• Fix SSE gauge leak, config bool handling, and metric error logging by @ChrisJBurns in #3756
• Add mcp.protocol.version, client operation duration, span target naming, and client span kind by @ChrisJBurns in #3757
• Fix tool counter per-request creation, omitempty config, and streamable-http version by @ChrisJBurns in #3761
• Update module github.com/cedar-policy/cedar-go to v1.5.1 by @renovate[bot] in #3751
• Add client skill metadata for skill path resolution by @JAORMX in #3712
• Add rfc8707 resource parameter refresh token by @rodrigo1208 in #3713
• Update anthropics/claude-code-action digest to 23ed4cb by @renovate[bot] in #3737
• Fix staticcheck SA5011 nil pointer lint failures by @JAORMX in #3769
• vMCP does not follow standard MCP Streamable HTTP behavior by @juancarlosm in #3624
• Add storage interfaces, errors, noop store, and factory by @JAORMX in #3768
• Update docker/build-push-action action to v6.19.0 by @renovate[bot] in #3774
• Update k8s.io/utils digest to b8788ab by @renovate[bot] in #3753
• Extract trace context from MCP _meta for distributed tracing by @ChrisJBurns in #3763
• Add SQLite foundation with connection, PRAGMAs, and goose migrations by @JAORMX in #3771
• Align vMCP client telemetry with OTEL MCP semantic conventions by @ChrisJBurns in #3775
• Add String() method to telemetry Config to redact OTLP credentials by @ChrisJBurns in #3782
• Add ToolStore interface and refactor DummyOptimizer to use it by @aponcedeleonch in #3749
• Add explicit histogram bucket boundaries to duration metrics by @ChrisJBurns in #3787
• Add Redis Storage Backend for Auth Server by @tgrunnagle in #3639
• Use workload name as default OTel service name by @ChrisJBurns in #3788
• Update golang.org/x/exp/jsonrpc2 digest to 2735e65 by @renovate[bot] in #3728
• Update k8s.io/utils digest to b8788ab by @renovate[bot] in #3780
• Update docker/build-push-action action to v6.19.1 by @renovate[bot] in #3781
• Resolve OTel serviceVersion at runtime instead of persisting it by @ChrisJBurns in #3789
• Add SQLite SkillStore implementation and factory wiring by @JAORMX in #3801
• Update registry from toolhive-registry release v2026.02.12 by @github-actions[bot] in #3766
• Update docker/build-push-action action to v6.19.2 by @renovate[bot] in #3802
• Update kubernetes packages to v0.35.1 by @renovate[bot] in #3767
• Update module github.com/cedar-policy/cedar-go to v1.5.2 by @renovate[bot] in #3799
• Update anthropics/claude-code-action digest to f669191 by @renovate[bot] in #3800
• Add test quality guidelines to CLAUDE.md by @aponcedeleonch in #3807
• Fix wrong API group in MCPExternalAuthConfig webhook marker by @jhrozek in #3798
• Add OTEL telemetry documentation and migration guide by @ChrisJBurns in #3784
• Wire AWS STS middleware into the runner middleware chain by @jhrozek in #3770
• Add Redis Storage Integration Tests with Testcontainers by @tgrunnagle in #3785
• Add scope parameter to WWW-Authenticate header per RFC 6750 by @jhrozek in #3795
• Add offline_access to default scopes and fix PRM scope discovery by @jhrozek in #3794
• Set audience on DCR clients for refresh token support by @jhrozek in #3796
• Return scope in DCR response per RFC 7591 Section 3.2.1 by @jhrozek in #3797
• Update registry from toolhive-registry release v2026.02.13 by @github-actions[bot] in #3817
• Fix kind load failures with Docker 29+ containerd image store by @jhrozek in #3815
• Add SQLite FTS5-backed ToolStore for optimizer search by @aponcedeleonch in #3786
• Update aquasecurity/trivy-action action to v0.34.0 by @renovate[bot] in #3813
• Align skills REST API contract with RESTful conventions by @JAORMX in #3818
• Add AWS STS auth type to MCPExternalAuthConfig CRD by @jhrozek in #3816
• Add Operator CRD Types for Auth Server Redis Storage by @tgrunnagle in #3793
• Update registry from toolhive-registry release v2026.02.14 by @github-actions[bot] in #3825
• Update anthropics/claude-code-action digest to ea36d6a by @renovate[bot] in #3809
• Update registry from toolhive-registry release v2026.02.15 by @github-actions[bot] in #3827
• Update kindest/node Docker tag to v1.35.1 by @renovate[bot] in #3826
• Update module github.com/mark3labs/mcp-go to v0.44.0 by @renovate[bot] in #3828
• Update golang.org/x/exp/jsonrpc2 digest to 81e46e3 by @renovate[bot] in #3810
• Update registry from toolhive-registry release v2026.02.16 by @github-actions[bot] in #3829
• Update anthropics/claude-code-action digest to 68cfeea by @renovate[bot] in #3830
• Add token metrics to DummyOptimizer find_tool responses by @aponcedeleonch in #3821
• Add basic SkillService implementation and API handlers by @JAORMX in #3804
• Add shared skill types by @blkt in #3833
• Release v0.9.4 by @stacklokbot in #3836

New Contributors

• @rodrigo1208 made their first contribution in #3713
• @juancarlosm made their first contribution in #3624

Full Changelog: v0.9.3...v0.9.4