v0.15.0

0.15.0 (2026-10-15)

⚠ BREAKING CHANGES

• oauth: serve the AuthKit OAuth server MCP clients sign in through (#142)

Features

• Add native group authorization (#136) (dcf3719)
• Make request budgets configurable (#133) (2fa7f44)
• oauth: serve the AuthKit OAuth server MCP clients sign in through (#142) (dcfb3d4)
• organizations: implement IT contacts (#126) (c1edc4c)

Bug Fixes

• auth: replay a refresh token within the 30s grace period (#137) (6bf2edf)
• dsync: match spec payloads for dsync.activated and dsync.deleted (#132) (933e75f)
• memberships: honor the plain statuses param and default to active (#135) (34fdbad)
• sso: return token_type, expires_in and profile.name from /sso/token (#130) (83d0480)