Fixed
- (nancy) Remediate nancy findings in #73 by @heraldbot[bot]
Full Changelog: https://github.com/giantswarm/klaus-oci/compare/v0.0.60...v0.0.61
Full Changelog: https://github.com/giantswarm/klaus-oci/compare/v0.0.60...v0.0.61
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.2.25...v0.2.26
Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.259...v0.0.260
Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.258...v0.0.259
Full Changelog: https://github.com/giantswarm/muster/compare/v0.22.7...v0.22.8
Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.257...v0.0.258
api.TokenExchangeConfig (#942): the new WithResolvedRuntime method is the single place that stamps the per-connection runtime state (resolved client credentials, appended requiredAudiences scopes) onto a value copy, and SpecOnly is the single place that strips it for CR comparison. Replaces the duplicated build logic in the aggregator’s connection and tool-call paths and the hand-rolled field clearing in the reconciler comparison. WithResolvedRuntime returns a distinct ResolvedTokenExchangeConfig type which the token-refresh closures now require, so handing them the shared spec-only registry definition (the #944 bug) no longer compiles; the tool-call path’s refresh wiring is now pinned by its own regression test as well. No behavior change.TokenExchange pointer (which, since #940, deliberately never carries the runtime-resolved credentials or appended requiredAudiences scopes), so every re-exchange after the first token neared expiry ran without client credentials — failing outright against a Dex requiring client auth and evicting the session back to Auth Required — and without the required audiences, minting tokens the downstream server rejects. (#942)application.giantswarm.io/team now renders bumblebee instead of an empty string: the labels helper looked up the annotation under the wrong key (application.giantswarm.io/team) instead of the OCI key io.giantswarm.application.team set in Chart.yaml.Full Changelog: https://github.com/giantswarm/muster/compare/v0.22.3...v0.22.4