Orionis v0.3.0

Highlights

• Adds recursive wildcard scopes with suffix patterns: prefix.* for one segment and prefix.** for recursive matching.
• Allows client credentials token requests to include multiple wildcard scopes in the OAuth space-separated scope field.
• Makes orionis.Claims and ginorion.Require(...) wildcard-aware so resource services can keep route checks concrete.
• Keeps default_scopes concrete-only and validates malformed wildcard patterns in config/build paths.

Verification

• go test ./...
• go test -race ./...
• go vet ./...
• staticcheck ./...
• govulncheck ./...
• docker build --build-arg TARGET=./cmd/orionis-auth -t stremovskyy/orionis:ci .
• scripts/smoke-release-image.sh stremovskyy/orionis:ci
• docker compose build
• git diff --check