What's Changed

• chore: update mcpchecker evaluation results by @github-actions[bot] in #1286
• fix(kubevirt): avoid article agreement issue in product name templates by @ksimon1 in #1287
• fix(evals): llm judge config is correct with new API by @Cali0707 in #1289
• NETOBSERV-2230 Add netobserv toolset by @jpinsonneau in #1159
• fix(kubernetes): bound discovery requests during startup by @ychampion in #1285
• Config option for toolset prefiltering by @2uasimojo in #1293

New Contributors

• @jpinsonneau made their first contribution in #1159
• @ychampion made their first contribution in #1285

Full Changelog: v0.0.64...v0.0.65

What's Changed

• feat(kiali) Refactored metrics params by @hhovsepy in #1225
• feat(kiali) Updated get_logs description by @hhovsepy in #1226
• chore(skills): add toolset design skill by @Cali0707 in #1229
• fix(deps): remove replace directive to restore go install by @manusa in #1233
• docs: remove obsolete ServiceAccount example from Entra ID setup by @cajieh in #1187
• test(evals): add update-vm-instancetype eval task by @lyarwood in #814
• chore: update mcpchecker evaluation results by @github-actions[bot] in #1236
• feat(core): add structuredContent to resources_get and resources_list by @jordigilh in #1232
• fix(core): clarify SSA full-state semantics in resources_create_or_update description by @lunarwhite in #1184
• build(deps): bump golang.org/x/mod from 0.36.0 to 0.37.0 in the golang-x group by @dependabot[bot] in #1242
• cleanup(logs): more contextual logging by @Cali0707 in #1240
• ci(mcpchecker): reference workflow event inputs via env vars by @manusa in #1247
• docs: add SECURITY.md policy by @manusa in #1246
• cleanup(logs): more contextual logging in kubevirt and mcp by @manusa in #1243
• ci(release): scope publish workflows to first-party tag-push releases by @manusa in #1250
• chore(evals): fix stale docs and drifted Makefile defaults by @manusa in #1237
• chore(ci): drive toolset labels and owner notifications from CODEOWNERS by @manusa in #1248
• build(deps): bump actions/github-script from 8 to 9 in the github-actions group by @dependabot[bot] in #1252
• chore: update mcpchecker evaluation results by @github-actions[bot] in #1259
• test(e2e): setup initial e2e testing by @Cali0707 in #1228
• chore(ci): skip mcpchecker evaluation on forks by @manusa in #1261
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in #1269
• chore(ci): set 30m timeout on e2e job by @Cali0707 in #1267
• chore(e2e): cleanup e2e framework by @Cali0707 in #1268
• feat!: target-specific tool filtering by @2uasimojo in #1196
• feat(kiali): remove patch version from Kiali by @josunect in #1272
• fix(evals): correct core task-definition bugs by @manusa in #1253
• build(deps): bump the golang-x group with 2 updates by @dependabot[bot] in #1273
• feat(evals): add auto-generated validated projects section to README by @lunarwhite in #1235
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0 by @dependabot[bot] in #1274
• refactor(ci): use timeline API for mcpchecker SHA pinning by @Cali0707 in #1275
• build(deps): bump helm.sh/helm/v3 from 3.21.2 to 3.21.3 by @dependabot[bot] in #1277
• feat(otel): logs are exported with otel now by @Cali0707 in #1260
• cleanup(logs): migrate remaining klog.FromContext to klogutil.FromContext by @manusa in #1278
• feat(http): add bind address and warnings when on 0.0.0.0 with no tls/auth by @Cali0707 in #1276
• fix(http): extend bind address warning to IPv6 and add tests by @manusa in #1280

New Contributors

• @jordigilh made their first contribution in #1232

Full Changelog: v0.0.63...v0.0.64

What's Changed

• feat(kubevirt): add product name override mechanism for downstream branding by @ksimon1 in #1070
• fix(test): inherit ReadOnly from suite config in reload test by @matzew in #1136
• fix(test): use BaseDefault() in ToolsetsSuite to avoid downstream config leaking by @matzew in #1137
• fix(test): preserve ReadOnly in cfgFromTOML helper for downstream compatibility by @matzew in #1139
• ci(mcpchecker): move to using mcpchecker diff action instead of bash scripts for diff by @Cali0707 in #1141
• docs(agents): expand downstream test guidance + refactor TOML idioms by @manusa in #1144
• chore(deps): pin gen-crd-api-reference-docs via replace directive by @manusa in #1145
• feat(config): support for logging to file by @difrost in #1083
• feat(tokenexchange): add EC key support and Entra ID federated auth style by @nader-ziada in #1147
• build(deps): bump helm.sh/helm/v3 from 3.20.2 to 3.21.0 by @dependabot[bot] in #1149
• feat(kubevirt): add tool for QEMU guest agent access by @codingben in #811
• feat(config): structure context list output by @immanuwell in #1151
• Kiali: Added ArgoCD applications into list resources by @hhovsepy in #1152
• chore(config): polish #1151 follow-up and add structured-output spec by @manusa in #1154
• build(kubevirt): bump KubeVirt v1.8.2, CDI v1.65.0, Multus v4.2.4 by @lyarwood in #1146
• Adjusted Kiali tests to endpoints. by @hhovsepy in #1115
• feat(core): Add fieldSelector to events_list and namespaces_list tools by @difrost in #1138
• build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1 by @dependabot[bot] in #1163
• fix(auth): Token pass-through mode by @nbottari9 in #1160
• fix(tests): fix sporadic http test failures by @difrost in #1161
• refactor(test): consolidate http test server shutdown by @manusa in #1165
• eval(core): check if ssa removes fields when model makes update by @Cali0707 in #1166
• build(deps): bump the opentelemetry group with 11 updates by @dependabot[bot] in #1171
• ci(workflows): track Go version from go.mod and gate directive bumps by @manusa in #1172
• fix(ci): move to using core instead of kubernetes suite by @Cali0707 in #1170
• build(deps): bump github.com/tektoncd/pipeline from 1.12.0 to 1.13.0 by @dependabot[bot] in #1175
• chore: update mcpchecker evaluation results by @github-actions[bot] in #1177
• refactor(kubernetes)!: return separate stdout and stderr from PodsExec by @arghosh93 in #1174
• chore: bump go to 1.26.3 by @Cali0707 in #1180
• build(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 by @matzew in #1182
• HTTP: Don't fail for errors during shutdown by @2uasimojo in #1183
• chore: update mcpchecker evaluation results by @github-actions[bot] in #1186
• feat: add HasGVKs method to Provider interface by @cajieh in #1189
• build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 in the golang-x group by @dependabot[bot] in #1192
• Kiali And Istio versions bump. by @hhovsepy in #1195
• feat: implement HasGVKs for single cluster provider by @shahsahil264 in #1193
• test(kiali): backend tests json result assertion fix by @hhovsepy in #1197
• fix(logging): guard log file close against concurrent writes by @manusa in #1200
• test(watcher): de-flake TestClusterState on slow runners by @manusa in #1201
• build(deps): bump the kubernetes group with 8 updates by @dependabot[bot] in #1203
• build(deps): bump helm.sh/helm/v3 from 3.21.0 to 3.21.1 by @dependabot[bot] in #1204
• feat(kiali): add built-in MCP prompts to the Kiali toolset by @hhovsepy in #1176
• test(exec): de-flake TestPodsExec SPDY stream reset on slow runners by @manusa in #1206
• chore(logs)!: switch to contextual logging by @Cali0707 in #1202
• build(deps): bump github.com/tektoncd/pipeline from 1.13.0 to 1.13.1 by @dependabot[bot] in #1209
• refactor(klogutil): type-safe composable log attributes by @manusa in #1210
• feat(kubevirt): add windows-golden-image prompt for automated Windows golden image creation by @ksimon1 in #1033
• chore: update mcpchecker evaluation results by @github-actions[bot] in #1207
• fix(http): SIGHUP reloads rather than terminating by @2uasimojo in #1191
• fix(http): ignore SIGHUP in no-config HTTP mode by @manusa in #1212
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 by @dependabot[bot] in #1214
• build(deps): bump actions/checkout from 6 to 7 in the github-actions group by @dependabot[bot] in #1216
• feat(api): add output schema support for MCP tools by @andreasgerstmayr in #1215
• build(deps): bump helm.sh/helm/v3 from 3.21.1 to 3.21.2 by @dependabot[bot] in #1221
• fix(auth): refresh STS config after reload by @jstar0 in #1217
• refactor(auth): finish STS reload follow-ups from #1110 by @manusa in #1223
• chore: update mcpchecker evaluation results by @github-actions[bot] in #1222
• test(mcp): cover output schema typed-nil guard (follow-up to #1215) by @manusa in #1218
• fix(tokenexchange): enforce require_tls on token exchange HTTP client by @lunarwhite in #1178

New Contributors

• @immanuwell made their first contribution in #1151
• @nbottari9 made their first contribution in #1160
• @arghosh93 made their first contribution in #1174
• @2uasimojo made their first contribution in #1183
• @cajieh made their first contribution in #1189
• @shahsahil264 made their first contribution in #1193
• @andreasgerstmayr made their first contribution in #1215
• @jstar0 made their first contribution in #1217
• @lunarwhite made their first contribution in #1178

Full Changelog: v0.0.62...v0.0.63

What's Changed

• fix(http): complete hot-reload surface for HTTP middleware config by @manusa in #1107
• fix(auth): propagate certificate_authority to token exchange HTTP client by @nader-ziada in #1109
• build(deps): bump github.com/google/jsonschema-go from 0.4.2 to 0.4.3 by @dependabot[bot] in #1112
• feat(api): add MCP resource by @swghosh in #1091
• build(deps): bump mcpchecker/mcpchecker from 0.0.16 to 0.0.17 in the github-actions group by @dependabot[bot] in #1118
• fix(http): fall back to openid-configuration when well-known endpoint returns empty body by @nader-ziada in #1117
• build(deps): bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.0 by @dependabot[bot] in #1120
• build(deps): bump mcpchecker/mcpchecker from 0.0.17 to 0.0.18 in the github-actions group by @dependabot[bot] in #1127
• build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0 by @dependabot[bot] in #1123
• fix(mcp): harden resources surface for hot reload by @manusa in #1114
• fix(validation)!: reject kubeconfig auth mode with require_oauth at startup by @nader-ziada in #1122
• build(deps): bump github.com/tektoncd/pipeline from 1.11.1 to 1.12.0 by @dependabot[bot] in #1133
• build(deps): bump github.com/fsnotify/fsnotify from 1.10.0 to 1.10.1 by @dependabot[bot] in #1134
• refactor(mcp): make ReloadConfiguration fully transactional (#1128) by @manusa in #1130

New Contributors

• @swghosh made their first contribution in #1091

Full Changelog: v0.0.61...v0.0.62

What's Changed

• test(mcp): add integration tests for prompt target parameter in multi-cluster by @manusa in #996
• refactor(evals): migrate llmJudge to builtin.llm-agent format by @nader-ziada in #1001
• feat(http): Fine-tune HTTP server settings by @nader-ziada in #991
• feat(helm): add backend storage driver support by @difrost in #998
• build(deps): bump mcpchecker/mcpchecker from 0.0.12 to 0.0.14 by @dependabot[bot] in #1003
• fix(cmd): cluster provider validation to include all possible strategies by @nader-ziada in #1007
• fix(python): bump requires-python, portable sed, and signal forwarding by @manusa in #1005
• refactor(helm): resolve config in constructor following Kiali pattern by @manusa in #1006
• test(validation): add bypass coverage and fallback config validation by @manusa in #994
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.42.0 to 1.43.0 by @dependabot[bot] in #1013
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.42.0 to 1.43.0 by @dependabot[bot] in #1014
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.64.0 to 0.65.0 by @dependabot[bot] in #1021
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.42.0 to 1.43.0 by @dependabot[bot] in #1015
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.42.0 to 1.43.0 by @dependabot[bot] in #1022
• test(mcp): resolve kiali toolset name dynamically in require_tls tests by @matzew in #1025
• chore: update mcpchecker evaluation results by @github-actions[bot] in #1023
• feat(tekton): add Tekton toolset with pipeline and task management by @ksimon1 in #892
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 by @dependabot[bot] in #1028
• build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0 by @dependabot[bot] in #1027
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 by @dependabot[bot] in #1030
• build(deps): bump helm.sh/helm/v3 from 3.20.1 to 3.20.2 by @dependabot[bot] in #1031
• feat(build): multi-arch kubernetes mcp server by @modassarrana89-new in #1029
• feat(kiali): Setup tracing in Kiali environment by @josunect in #1024
• build(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #1035
• feat(build): Adding cross-compile hook for gh actions by @matzew in #1032
• fix(build): restore ARCHS variable, simplify multi-arch, and enable s390x/ppc64le container images by @manusa in #1036
• chore: update mcpchecker evaluation results by @github-actions[bot] in #1038
• build(deps): bump mcpchecker/mcpchecker from 0.0.14 to 0.0.15 by @dependabot[bot] in #1041
• test(config): tool override tests are compatible with downstream changes by @Cali0707 in #1040
• feat(evals): add mcpchecker diff to compare PR results against baseline by @nader-ziada in #1034
• feat(auth): add Microsoft Entra ID support with On-Behalf-Of token exchange by @nader-ziada in #953
• fix(evals): do not use docker images, add core-eval-testing evals by @mvinkler in #1037
• Entra ID / OBO test follow-ups and dead code cleanup by @manusa in #1046
• fix(core): replace unsafe type assertions with safe parameter helpers by @xingyug in #1039
• fix(test): call resp.Body.Close() instead of referencing method value by @xingyug in #1048
• refactor(auth): deduplicate OIDC config fetches and simplify token exchange by @nader-ziada in #1047
• fix(api): migrate tool handlers to WrapParams sticky-error pattern by @manusa in #1049
• fix(evals): Replace unmaintained bitnami helm charts by @matzew in #1052
• ci(evals): add helm option to mcpchecker runner by @Cali0707 in #1053
• feat(http): add per-session rate limiting via MCP middleware by @matzew in #1051
• build(deps): bump mcpchecker/mcpchecker from 0.0.15 to 0.0.16 by @dependabot[bot] in #1056
• build(deps): bump golang.org/x/time from 0.14.0 to 0.15.0 by @dependabot[bot] in #1055
• fix(config): enforce all Validate() checks on SIGHUP reload (#989) by @manusa in #1058
• fix(pods): resolve default container for multi-container pods (KEP-2227) by @matzew in #1060
• fix(config): auto-select kubeconfig context when current-context is empty by @manusa in #1062
• build(deps): bump k8s.io/kubectl from 0.35.3 to 0.35.4 by @dependabot[bot] in #1065
• build(deps): bump k8s.io/apiextensions-apiserver from 0.35.3 to 0.35.4 by @dependabot[bot] in #1067
• fix(config): validate token exchange fields at config load (#1057) by @manusa in #1072
• fix(config): normalize whitespace for token exchange fields before validation by @matzew in #1074
• fix(config): validate confirmation fields at config load (#1071) by @manusa in #1075
• feat(helm-charts): add Gateway API HTTPRoute support by @muroed in #1059
• feat(config): add skip_jwt_verification to enforce OIDC verification by @matzew in #1078
• chore: update mcpchecker evaluation results by @github-actions[bot] in #1076
• fix(helm-charts): address HTTPRoute follow-ups from #1059 by @manusa in #1082
• fix(evals): fix kubevirt eval task namespace races and setup failures by @lyarwood in #1054
• fix(evals): fix kubernetes/scale-deployment cleanup script by @difrost in #1073
• build(deps): bump github.com/tektoncd/pipeline from 1.11.0 to 1.11.1 by @dependabot[bot] in #1085
• fix(auth): restore default passthrough of Authorization header to cluster by @nader-ziada in #1084
• fix(auth): restore Derived() require_oauth guard and broaden raw-token coverage by @manusa in #1088
• fix(evals): rename tasksets: kubernetes to core by @mvinkler in #1081
• fix(helm-charts): enable read-only root filesystem in Helm chart (security) by @matzew in #1090
• fix(helm-charts): make ServiceAccount token auto-mount configurable on Helm chart (security) by @matzew in #1093
• chore(ci): group dependabot updates for k8s, otel, and golang.org/x by @manusa in #1101
• feat(kiali): refactor from v2.25 (code + evals) by @aljesusg in #969
• fix(kiali): use dynamic toolset name in tests to avoid downstream conflicts by @matzew in #1103
• fix(auth): propagate config reload to HTTP authorization middleware by @nader-ziada in #1105

New Contributors

• @modassarrana89-new made their first contribution in https://github.com/cont...

Breaking Changes

• provider.GetTargets is now optionally user-scoped (#843) — The GetTargets method signature has changed to optionally accept user-scoping. If you have custom code that calls provider.GetTargets, you will need to update the call sites to match the new signature.

What's Changed

• fix(kiali): limit response body size to prevent unbounded memory consumption by @matzew in #927
• fix(ci): add v prefix to OCI identifier in MCP registry publish by @manusa in #929
• fix(kiali): return error when response exceeds maximum allowed size by @manusa in #930
• refactor(kubernetes): consolidate API path prefix handling in round-tripper by @manusa in #928
• build(deps): bump mcpchecker/mcpchecker from 0.0.10 to 0.0.11 by @dependabot[bot] in #933
• build(deps): bump k8s.io/api from 0.35.2 to 0.35.3 by @dependabot[bot] in #934
• build(deps): bump k8s.io/metrics from 0.35.2 to 0.35.3 by @dependabot[bot] in #937
• build(deps): bump k8s.io/apiextensions-apiserver from 0.35.2 to 0.35.3 by @dependabot[bot] in #938
• build(deps): bump k8s.io/cli-runtime from 0.35.2 to 0.35.3 by @dependabot[bot] in #936
• build(deps): bump k8s.io/kubectl from 0.35.2 to 0.35.3 by @dependabot[bot] in #935
• refactor(kubernetes)!: provider.GetTargets is optionally user scoped now by @Cali0707 in #843
• refactor(mcp): clean up multi-target naming and tests after PR #843 by @manusa in #942
• fix(http): harden well-known OAuth proxy security by @manusa in #943
• test(helm): add unit tests for simplify function by @matzew in #945
• fix(metrics): metrics endpoints do not required oauth by @Cali0707 in #948
• feat(helm): validate chart references and add allowed_registries config by @matzew in #950
• chore: update mcpchecker evaluation results by @github-actions[bot] in #951
• test(evals): add suite:config to all config tasks, add nodes-top.yaml by @mvinkler in #952
• build(deps): bump azure/setup-helm from 4 to 5 by @dependabot[bot] in #956
• build(deps): bump mcpchecker/mcpchecker from 0.0.11 to 0.0.12 by @dependabot[bot] in #955
• build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @matzew in #957
• fix(helm): normalize scheme, host, and path in allowlist matching by @matzew in #958
• refactor: add structured output support and MCP spec compliance by @manusa in #960
• refactor: replace WriteString(Sprintf) with Fprintf (QF1012) by @matzew in #962
• fix(evals): enable core toolset for tekton eval suite by @ksimon1 in #959
• fix: prevent panic on non-bool type assertion in tool handlers by @manusa in #965
• chore(docs): add contributor guidelines by @manusa in #961
• ci: add GitHub Actions labeler for kubevirt toolset PRs by @lyarwood in #971
• fix(http): stop leaking internal details in well-known error responses by @matzew in #973
• chore(ci): extend labeler with kiali and tekton toolsets by @manusa in #972
• chore(evals): replace deprecated openai-agent with openai-acp by @huangmingxia in #976
• fix(kubernetes): close old managers before replacing on reset by @matzew in #977
• test(kubernetes): add provider reset connection cleanup tests by @manusa in #979
• feat(ci): add MCPB bundle distribution by @manusa in #970
• fix(helm): replace blunt .0 removal with targeted regex in configmap template by @ecthelion77 in #983
• fix(helm): handle negative integers in configmap .0 cleanup regex by @manusa in #986
• feat(security): add require_tls config to enforce HTTPS connections by @nader-ziada in #954
• fix(evals): add provider prefixes to model specifications by @nader-ziada in #988
• fix(http): exclude /stats endpoint from OAuth protection by @ZhaoZ3y in #984
• feat(elicitation): add confirmation rules system by @Cali0707 in #931
• fix(mcp): add multi-cluster target parameter to prompts by @madaraszg-tulip in #980
• feat(config): add tool description overrides by @Cali0707 in #982
• fix(kubernetes): guard managers with RW mutex to avoid concurrent map… by @difrost in #966
• test(security): add require_tls validation and enforcement tests by @manusa in #990
• test(http): consolidate OAuth-exempt endpoint tests into single test by @manusa in #992
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #999

New Contributors

• @mvinkler made their first contribution in #952
• @huangmingxia made their first contribution in #976
• @ecthelion77 made their first contribution in #983
• @ZhaoZ3y made their first contribution in #984
• @madaraszg-tulip made their first contribution in #980
• @difrost made their first contribution in #966

Full Changelog: v0.0.59...v0.0.60

What's Changed

• fix(evals): add missing suite labels to kubevirt tasks by @lyarwood in #835
• fix(observability): honor OTel endpoint from TOML config by @patrickeasters in #834
• fix(mcp): init request w/o client info does not panic by @Cali0707 in #844
• build(deps): bump k8s.io/api from 0.35.1 to 0.35.2 by @dependabot[bot] in #851
• build(deps): bump k8s.io/kubectl from 0.35.1 to 0.35.2 by @dependabot[bot] in #852
• build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.4.0 by @dependabot[bot] in #854
• build(deps): bump k8s.io/apiextensions-apiserver from 0.35.1 to 0.35.2 by @dependabot[bot] in #855
• feat(helm-charts): support initContainers override by @wengyao04 in #822
• chore(evals): migrate claude code agent to acp by @Cali0707 in #839
• docs(kubevirt): add dedicated KubeVirt toolset documentation by @lyarwood in #815
• docs(kubevirt): address PR #815 review comments by @manusa in #860
• fix(mcp): tool call without arguments does not panic by @manusa in #859
• feat(api): support elicitation from tool calls by @Cali0707 in #804
• test(mcp): add regression test for nil ClientInfo panic by @manusa in #848
• fix(kubernetes): wrappers only applied once in .Derived by @Cali0707 in #861
• test(observability): add comprehensive test suites for telemetry and metrics by @manusa in #840
• feat(mcp): add URL-mode elicitation support by @manusa in #862
• fix(kiali): Verify CI setup for gevals suite kiali by @aljesusg in #831
• fix(ci): publish container images to ghcr.io for MCP Registry compatibility by @manusa in #837
• test(kubernetes): add regression test for double transport wrapping in .Derived by @manusa in #864
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.40.0 to 1.41.0 by @dependabot[bot] in #865
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.40.0 to 1.41.0 by @dependabot[bot] in #872
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.40.0 to 1.41.0 by @dependabot[bot] in #866
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.62.0 to 0.63.0 by @dependabot[bot] in #874
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.40.0 to 1.41.0 by @dependabot[bot] in #868
• fix(config): remove helm toolset from default enabled toolsets by @matzew in #826
• chore(formatting) fix incorrect formatting by @matzew in #881
• chore(ci): add formatting check to build workflow by @manusa in #882
• feat(eval): refactor helm evals using kube extensions by @matzew in #880
• test(kubernetes): add derived client connection cleanup tests by @manusa in #879
• build(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 by @dependabot[bot] in #885
• chore(docs): reorganize validation documentation by @manusa in #889
• fix(config): normalize trimmed paths in validation before use by @manusa in #893
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.41.0 to 1.42.0 by @dependabot[bot] in #894
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.41.0 to 1.42.0 by @dependabot[bot] in #895
• build(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 by @dependabot[bot] in #898
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.41.0 to 1.42.0 by @dependabot[bot] in #903
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.63.0 to 0.64.0 by @dependabot[bot] in #899
• chore: update mcpchecker evaluation results by @github-actions[bot] in #904
• refactor(kubernetes): use typed errors in schema validator by @manusa in #891
• build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 by @dependabot[bot] in #905
• build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1 by @dependabot[bot] in #906
• build(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 by @dependabot[bot] in #907
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.41.0 to 1.42.0 by @dependabot[bot] in #908
• fix(kubernetes): creating shared http client and close connections on the client by @rajeeshckr in #850
• refactor: standardize registry patterns across the codebase by @manusa in #890
• chore(test): Increase timeout on namespaces test by @matzew in #910
• feat(evals): Expand Makefile with mcpchecker support by @Ruclo in #911
• feat(kubevirt): convert kubevirt tasks to mcpchecker/v1alpha2 api by @ksimon1 in #756
• chore(evals): rename remaining gevals references to mcpchecker by @manusa in #912
• cleanup(kubevirt): Remove snapshot patch in snapshot-vm and restore-vm tasks by @Ruclo in #913
• build(deps): bump helm.sh/helm/v3 from 3.20.0 to 3.20.1 by @dependabot[bot] in #915
• Revert "chore(test): Increase timeout on namespaces test (#910)" by @matzew in #914
• refactor(api): expose BaseConfig to tool and prompt handlers by @manusa in #916
• fix(test): adapt config provider tests for downstream default overrides by @matzew in #921
• build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1 by @dependabot[bot] in #923
• chore: update mcpchecker evaluation results by @github-actions[bot] in #924
• fix(kubernetes): avoid startup deadlock when the Kubernetes API is served behind a path prefix by @zhiyu0729 in #925
• feat(tekton): add Tekton Pipelines eval tasks by @ksimon1 in #917

New Contributors

• @patrickeasters made their first contribution in #834
• @wengyao04 made their first contribution in #822
• @github-actions[bot] made their first contribution in #904
• @rajeeshckr made their first contribution in #850
• @zhiyu0729 made their first contribution in #925

Full Changelog: v0.0.58...v0.0.59

What's Changed

• fix(ci): remove version field from OCI package for MCP registry compliance by @manusa in #701
• feat(docs): add prompt documentation generation to update-readme-tools by @manusa in #702
• chore(ci): upload results.json from weekly run to repo by @nader-ziada in #699
• fix(ci): mcpchecker action yaml syntax by @nader-ziada in #705
• chore(ci): add check to verify README.md MCP tools are up-to-date by @manusa in #706
• build(deps): bump actions/download-artifact from 6 to 7 by @dependabot[bot] in #707
• test(cmd): using a more generic way to list toolsets by @matzew in #708
• refactor(auth): remove unused tool-scoped authorization middleware by @manusa in #709
• feat(kubevirt): add secondary network interface support to vm_create by @lyarwood in #682
• build(deps): bump mcpchecker/mcpchecker from 0.0.3 to 0.0.4 by @dependabot[bot] in #714
• chore(goimports): Run goimports by @matzew in #715
• fix(mcp): ensure InputSchema.Properties is initialized for all tools by @manusa in #718
• build(deps): bump go from 1.25.0 to 1.25.6 by @manusa in #719
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.39.0 to 1.40.0 by @dependabot[bot] in #723
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.39.0 to 1.40.0 by @dependabot[bot] in #724
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.39.0 to 1.40.0 by @dependabot[bot] in #727
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.61.0 to 0.62.0 by @dependabot[bot] in #730
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.39.0 to 1.40.0 by @dependabot[bot] in #732
• feat(kubevirt): add troubleshoot action to vm_lifecycle tool by @ksimon1 in #653
• feat(config): add default server instructions for MCP Tool Search by @nader-ziada in #716
• feat(config): add evals for 'config' toolset by @matzew in #734
• build(deps): bump mcpchecker/mcpchecker from 0.0.4 to 0.0.5 by @dependabot[bot] in #741
• feat(evals): add kubevirt tasks for vmsnapshot and vmrestore by @Ruclo in #735
• refactor(metrics)!: rename metrics from mcp_ to k8s_mcp_ prefix by @nader-ziada in #740
• test(cli): skip CLI tests if there is an override by @matzew in #738
• refactor(mcp): make mcp registration/deregistration consistent by @Cali0707 in #712
• feat(config): update evals for latest mcpchecker enhancement by @matzew in #742
• feat(mcp): add grace period seconds to delete options by @codingben in #656
• chore(ci): add helm chart validation to CI pipeline by @manusa in #745
• fix(helm): use root context $ in tpl() inside with blocks by @shyoon-devops in #744
• feat(helm): Adding evals for helm toolset by @matzew in #746
• fix(helm): use namespace label in recording rules for multi-tenant RBAC by @nader-ziada in #748
• build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 by @dependabot[bot] in #750
• build(deps): bump mcpchecker/mcpchecker from 0.0.5 to 0.0.6 by @dependabot[bot] in #751
• build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.0 by @dependabot[bot] in #755
• feat(evals): update mcpchecker to use labels by @josunect in #696
• chore(deps): bump mcpchecker from 0.0.6 to 0.0.7 by @Cali0707 in #761
• build(deps): bump k8s.io/apiextensions-apiserver from 0.35.0 to 0.35.1 by @dependabot[bot] in #765
• build(deps): bump k8s.io/cli-runtime from 0.35.0 to 0.35.1 by @dependabot[bot] in #766
• build(deps): bump k8s.io/metrics from 0.35.0 to 0.35.1 by @dependabot[bot] in #770
• build(deps): bump k8s.io/kubectl from 0.35.0 to 0.35.1 by @dependabot[bot] in #768
• build(deps): bump golangci-lint from v2.8.0 to v2.9.0 by @manusa in #772
• feat(http): propagate user agent to api server by @Cali0707 in #760
• refactor(http): improve user agent handling and test infrastructure by @manusa in #773
• fix(ci): update mcpchecker to use latest version by @nader-ziada in #774
• update mcpchecker action to 0.0.9 by @nader-ziada in #776
• fix(mcp): kubernetes-mcp-server is incompatible with llama.cpp (JSON-Schema) by @ThomasBuchinger in #759
• feat(helm-charts): make Service targetPort Configurable by @dkhachyan in #779
• feat(api): add structured content support by @onmete in #777
• feat(api): add _meta field support for tool definitions by @onmete in #778
• refactor(api): simplify structured content API with auto-serialization by @manusa in #782
• fix(container): remove hardcoded port by @mjudeikis in #752
• docs: add configuration reference and reorganize documentation by @manusa in #783
• refactor(helm-charts): simplify PrometheusRule by removing redundant recording rules by @nader-ziada in #786
• fix(helm-charts): use name helper for container name to respect nameOverride by @manusa in #789
• build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1 by @dependabot[bot] in #790
• feat(logging): centralize K8s error logging in MCP tool handler by @manusa in #792
• fix(test): resolve race conditions in tests and MCP server by @nader-ziada in #793
• feat(validation): add pre-execution validation layer by @nader-ziada in #764
• fix(toolsets): sort Toolsets() output for deterministic ordering (#791) by @manusa in #795
• feat: Add helm docs ci check and regenerate docs by @mjudeikis in #798
• docs: add cross-cluster deployment guide and improve in-cluster error UX by @manusa in #797
• feat(kubevirt): clone vm eval task and tool by @Ruclo in #788
• fix(core): resources_create_or_update forces SSA by @Cali0707 in #802
• test(core): add test for resources_create_or_update SSA force by @manusa in #805
• fix(core)!: resources_create_or_update removes status updates by @Cali0707 in #803
• test(mcp)!: remove mark3labs/mcp-go dependency from test infrastructure by @manusa in #784
• feat(ci): add kubevirt toolset support to mcpchecker workflow by @lyarwood in #796
• fix(evals): improve eval task prompts for reliability by @nader-ziada in #810
• docs(readme): improve configuration and documentation coverage by @nader-ziada in #807
• refact...

What's Changed

• chore(ci): restrict release workflows to version tags only by @manusa in #616
• fix(tests): adjust notification wait times for improved debounced notification handling by @manusa in #618
• build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.1.0 to 1.2.0 by @dependabot[bot] in #609
• refactor(mcp): update server initialization for go-sdk API changes by @manusa in #619
• refactor(test): use metav1 types for mock server discovery handlers by @manusa in #614
• feat: add token exchange provider support by @Cali0707 in #604
• fix(tokenexchange): register exchanger impls by @Cali0707 in #622
• chore(doc): Align AGENTS.md w/ actual Go version by @matzew in #623
• fix: strip http forwarded headers from requests to kc by @Cali0707 in #624
• chore(build): updating to more recent version of golangci-lint by @matzew in #627
• chore(build): add dockerignore by @Cali0707 in #628
• fix(http): add CORS headers for well-known endpoints by @manusa in #630
• feat(helm): add support for specifying RBAC by @Cali0707 in #636
• refactor(auth): remove unused tool-scoped authorization middleware by @manusa in #633
• test(http): refactor wellknown tests to use testify by @manusa in #634
• cleanup(helm): improve RBAC configuration by @Cali0707 in #640
• chore(ci): disable kiali eval tasks temporarily by @manusa in #643
• feat(kubernetes): add field selector support for filtering pods and resources by @manusa in #641
• chore(ci): add MCP Registry publishing workflow by @manusa in #645
• fix(evals): reduce PVC size in resize-pvc task for constrained environments by @manusa in #644
• feat(config_toolset): add targets_list tool by @Cali0707 in #635
• fix(mcp): update server.json to latest schema version by @manusa in #647
• feat(mcp): implement logging capability with error handling and secret redaction by @nader-ziada in #629
• fix(errors): wrap errors with %w for better error handling by @manusa in #648
• test(auth): restore token exchange integration tests by @manusa in #646
• build(deps): bump helm.sh/helm/v3 from 3.19.4 to 3.19.5 by @dependabot[bot] in #651
• chore(doc): update readme after recent merges, via make target by @matzew in #652
• test(mcp): add notification capture helpers and error logging tests by @manusa in #658
• test(kiali): contract tests by @josunect in #617
• refactor(build): use NPM_PACKAGE variable consistently in node.mk by @manusa in #660
• test(mcp): add forbidden log notification tests and timeout docs by @manusa in #661
• chore(evals): remove redundant eval-inline.yaml files by @manusa in #662
• fix(ci): use gevals action from main branch by @manusa in #663
• build(deps): bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 by @dependabot[bot] in #665
• feat(kcp): Add kcp provider by @mjudeikis in #657
• feat: add cluster-provider flag by @mjudeikis in #667
• chore(kubevirt): add eval tasks for VM creation and lifecycle by @lyarwood in #626
• feat(observability): add OpenTelemetry tracing and metrics support by @nader-ziada in #590
• build(deps): bump helm.sh/helm/v3 from 3.19.5 to 3.20.0 by @dependabot[bot] in #674
• build(deps): bump go.opentelemetry.io/otel from 1.38.0 to 1.39.0 by @dependabot[bot] in #671
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 by @dependabot[bot] in #672
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.38.0 to 1.39.0 by @dependabot[bot] in #679
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.38.0 to 1.39.0 by @dependabot[bot] in #673
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.38.0 to 1.39.0 by @dependabot[bot] in #678
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.38.0 to 1.39.0 by @dependabot[bot] in #675
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.38.0 to 1.39.0 by @dependabot[bot] in #680
• feat(metrics): add Prometheus exporter and monitoring resources by @nader-ziada in #670
• ci(release): fix checkout ref and prevent script injection by @nader-ziada in #683
• fix(ci): gevals permission check captures SHA to checkout by @Cali0707 in #684
• feat(helm): add support for additional containers in deployment by @Hapshanko in #649
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.54.0 to 0.61.0 by @dependabot[bot] in #685
• build(deps): bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #686
• build(deps): bump actions/download-artifact from 4 to 7 by @dependabot[bot] in #687
• refactor(kcp): consolidate kcp code into self-contained package by @manusa in #669
• chore(ci): only run gevals report if gevals actually ran by @Cali0707 in #693
• chore(ci): harden release-mcp-registry workflow security by @manusa in #690
• feat(kiali): split istio config read tool by @aljesusg in #692
• cleanup(tokenexchange): exchange logic contained in kubernetes provider layer by @Cali0707 in #695
• fix(kubernetes): use lazy evaluation for restMapper in AccessControlRoundTripper by @manusa in #689
• chore(ci): rename gevals to mcpchecker by @Cali0707 in #697
• build(deps): bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 by @dependabot[bot] in #700
• test(kubevirt): Add eval and agent configs directly to kubevirt tasks by @lyarwood in #691

New Contributors

• @mjudeikis made their first contribution in #657
• @Hapshanko made their first contribution in #649

Full Changelog: v0.0.56...v0.0.57

What's Changed

• chore(ci): add dependabot config for GitHub Actions by @manusa in #540
• build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #542
• fix(tests): improve handling of multiple fsnotify events in Windows tests by @manusa in #541
• build(deps): bump astral-sh/setup-uv from 5 to 7 by @dependabot[bot] in #543
• refactor(api): extract common interface{} to int64 conversion utility by @manusa in #539
• fix(watcher): add debouncing to kubeconfig watcher for Windows compatibility by @manusa in #545
• build(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #544
• build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @dependabot[bot] in #546
• test(events): ensure event creation errors are properly handled by @manusa in #547
• feat(config): add drop-in configuration support with dynamic reload by @nader-ziada in #524
• update readme to fix drop-in config section by @nader-ziada in #552
• build(deps): bump github.com/mark3labs/mcp-go from 0.43.1 to 0.43.2 by @dependabot[bot] in #553
• test: replace custom WaitForCondition with testify assertions by @manusa in #550
• test(core): add denied resources tests for resources_scale tool by @manusa in #551
• test(config): additional tests for drop-in configuration by @manusa in #557
• chore(ci): pin gevals version to releases, not main by @Cali0707 in #558
• build(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 by @dependabot[bot] in #560
• build(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 by @dependabot[bot] in #561
• fix(kiali): refactor workload logs tool by @josunect in #538
• feat(kiali): Possibility of renaming Kiali in the downstream distribution by @aljesusg in #507
• test(kiali): move tests to MCP layer by @manusa in #562
• feat(kubevirt): Add VM lifecycle management tools (start, stop, restart) by @ksimon1 in #533
• fix(kiali): bug related with rateConversion by @aljesusg in #565
• refactor(config)!: extract config interfaces to pkg/api/config by @manusa in #566
• refactor(test): use msg variable consistently in denial test assertions by @manusa in #563
• refactor(api): add parameter extraction utilities for tool handlers by @manusa in #564
• build(deps): bump k8s.io/apimachinery from 0.34.2 to 0.34.3 by @dependabot[bot] in #569
• build(deps): bump k8s.io/metrics from 0.34.2 to 0.34.3 by @dependabot[bot] in #572
• build(deps): bump k8s.io/kubectl from 0.34.2 to 0.34.3 by @dependabot[bot] in #570
• build(deps): bump helm.sh/helm/v3 from 3.19.2 to 3.19.3 by @dependabot[bot] in #571
• build(deps): bump k8s.io/apiextensions-apiserver from 0.34.2 to 0.34.3 by @dependabot[bot] in #575
• feat(config): add configurable prompts support by @nader-ziada in #559
• remove unnecessary yaml layer from prompts types by @nader-ziada in #580
• feat: add support for mcp server instructions by @Cali0707 in #579
• refactor(api)!: replace internal Kubernetes references with api package interfaces by @manusa in #578
• chore(docs): update README.md with outdated kiali and tools sorting by @manusa in #583
• test(mcp): store initialization results in McpClient for better instruction handling by @manusa in #582
• build(deps): bump helm.sh/helm/v3 from 3.19.3 to 3.19.4 by @dependabot[bot] in #586
• feat(api)!: add toolset prompts infrastructure by @nader-ziada in #581
• refactor(api)!: consolidate AccessControlClientset into Kubernetes struct by @manusa in #585
• refactor(api)!: extract operational methods from KubernetesClient to Core struct by @manusa in #589
• refactor!: remove kubernetes API server token validation by @Cali0707 in #588
• test(prompts): split notification tests to assert specific list changes by @manusa in #591
• build(deps): bump k8s.io/apimachinery from 0.34.3 to 0.35.0 by @dependabot[bot] in #592
• build(deps): bump github.com/google/jsonschema-go from 0.3.0 to 0.4.0 by @dependabot[bot] in #595
• build(deps): bump k8s.io/metrics from 0.34.3 to 0.35.0 by @dependabot[bot] in #593
• build(deps): bump k8s.io/apiextensions-apiserver from 0.34.3 to 0.35.0 by @dependabot[bot] in #597
• build(deps): bump k8s.io/cli-runtime from 0.34.3 to 0.35.0 by @dependabot[bot] in #599
• build(deps): bump k8s.io/kubectl from 0.34.3 to 0.35.0 by @dependabot[bot] in #598
• build(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 by @dependabot[bot] in #601
• build(deps): bump github.com/google/jsonschema-go from 0.4.0 to 0.4.1 by @dependabot[bot] in #600
• feat(mcp-registry): add MCP Registry metadata and server manifest by @manusa in #584
• build(deps): bump github.com/google/jsonschema-go from 0.4.1 to 0.4.2 by @dependabot[bot] in #606
• feat(kiali): Add Kiali with gevals by @aljesusg in #527
• feat(config): add stateless mode configuration by @alexeykazakov in #603
• test(config): add stateless mode CLI tests and refactor HTTP transport tests by @manusa in #610
• refactor(prompts): simplify config prompts parsing with direct TOML unmarshalling by @manusa in #607
• prompt(core): add cluster health check by @ropatil010 in #434
• refactor(build): consolidate tool installation patterns by @manusa in #612
• fix(test): update SIGHUP prompt reload test for built-in prompts by @manusa in #613
• refactor(prompts): health check clean up and use of typed clientset by @manusa in #615

New Contributors

• @ksimon1 made their first contribution in #533
• @alexeykazakov made their first contribution in #603
• @ropatil010 made their first contribution in #434

Full Changelog: v0.0.55...v0.0.56