Fixed
- (deps) Update module github.com/giantswarm/mcp-oauth to v0.18.5 in #923 by @renovate[bot]
Full Changelog: https://github.com/giantswarm/muster/compare/v0.19.1...v0.19.2
Full Changelog: https://github.com/giantswarm/muster/compare/v0.19.1...v0.19.2
Full Changelog: https://github.com/giantswarm/muster/compare/v0.19.0...v0.19.1
Full Changelog: https://github.com/giantswarm/agentic-platform/compare/v1.16.2...v1.17.0
isServerSSOBased did not recognize the local-mint auth mode, so the aggregator event handler attempted global registration for a local-mint backend (which has no global persistent client), failed on 401, and the backend’s tools never reached the caller. local-mint now joins token forwarding and token exchange as a per-session auth mode.Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.244...v0.0.245
Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.2.21...v0.2.22
Full Changelog: https://github.com/giantswarm/muster/compare/v0.18.16...v0.18.17
notifications/{tools,resources,prompts}/list_changed when a backend connects after the session was opened (localMint/OBO background bootstrap, post-restart re-init), so late-connecting backends no longer stay invisible for the session’s lifetime.Full Changelog: https://github.com/giantswarm/muster/compare/v0.18.14...v0.18.15
email to muster-minted OBO JWTs, fireOnAuthenticated fires for OBO requests, but the onAuthenticated callback returned early at the idToken == "" guard (written to avoid 403-spam for post-restart Dex sessions). The guard is now narrowed: OBO sessions (detected via userInfo.ActorSubject) are allowed through. The inbound OBO bearer is threaded into the detached initSSOForSession background context and used as the RFC 8693 subject token in EstablishConnectionWithLocalMint, falling back from the Dex ID-token lookup when none is present.