All pull requests

Pull requests

• chore(deps): weekly lockfile update (2026-10-05)

  dependencies
  #1850·github-actions[bot] opened Oct 5, 2026Bot·

  ·

• chore(deps): bump the actions group in /.github/workflows with 2 updates

  dependenciesgithub_actions
  #1848·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• feat(auth): per-user long-lived API keys (wgk-) with console mint/list/revoke

  #1847·scs001 opened Oct 5, 2026·

  ·

• fix(nginx): serve a root-endpoint server at its bare path

  #1831·go-faustino opened Oct 2, 2026Contributor·

  ·
  1

• fix(virtual): broker per-user credentials for backing MCP servers

  #1825·omrishiv opened Oct 1, 2026Contributor·

  ·
  1

  1

• chore(deps): bump the uv group across 6 directories with 2 updates

  dependenciespython:uv
  #1823·dependabot[bot] opened Oct 1, 2026Bot·

  ·

• fix(compose): wire MCP_PROXY_TIMEOUT into the prebuilt compose file

  #1820·scs001 opened Oct 1, 2026·

  ·

• fix(search): build endpoint_url with the server's append_mcp_path

  awaiting-author
  #1814·go-faustino opened Sep 29, 2026Contributor·

  ·
  1

  3

• fix(auth): normalize IdP group names and name the groups the login filter drops

  #1801·Evolver-sweden opened Sep 25, 2026Contributor·

  ·
  1

  2

• feat(egress): optional OBO exchanged-token cache (issue #1666)

  #1798·omrishiv opened Sep 24, 2026Contributor·

  ·

  · the-overflow-parking-lot
  1

  1

• feat(mcpgw): pool the registry and M2M token egress on one long-lived client

  #1796·omrishiv opened Sep 24, 2026Contributor·

  ·

  · the-overflow-parking-lot
  1

  1

• fix(virtual-servers): stop credential egress and enforce backend state on the virtual data path

  #1795·omrishiv opened Sep 24, 2026Contributor·

  ·

  · the-overflow-parking-lot
  1

• harden CLI server-import pipeline against code and command injection

  #1794·omrishiv opened Sep 24, 2026Contributor·

  ·

  · the-overflow-parking-lot
  1

• feat(auth): Logto identity provider support (OAuth login + IAM role/group management)

  awaiting-author
  #1791·scs001 opened Sep 24, 2026·

  ·
  3

  

• fix(charts): chart-render keycloak-client-secret and gate secret generation

  #1784·omrishiv opened Sep 22, 2026Contributor·

  ·

  · the-overflow-parking-lot
  1

• feat(keycloak): make the admin token realm configurable

  #1764·mrchi opened Sep 16, 2026·

  ·
  7

• fix(prm): resolve RFC 9728 path-aware per-server PRM under a path-prefixed registry_url

  #1748·peelandsee opened Sep 11, 2026·

  ·
  1

  2

• fix(auth): normalize IdP group names before matching scope mappings

  awaiting-author
  #1713·AmirF194 opened Aug 31, 2026Contributor·

  ·
  7

  

• feat(security): Asymmetric (ES256) internal JWT signing

  #1693·omrishiv opened Aug 26, 2026Contributor·

  ·
  1

• feat(egress): add operator_credential mode to inject the shared backend credential

  authenticationawaiting-authorcredentials-managementenhancement
  #1686·doppelc opened Aug 25, 2026Contributor·

  ·
  2

• feat(egress): implement Keycloak RFC 8693 token-exchange for OBO

  #1678·ruspg opened Aug 23, 2026·

  ·

  · the-overflow-parking-lot
  27

• fix(helm): stack-owned keycloak-internal Service so nginx survives Keycloak pod rolls

  #1677·doppelc opened Aug 21, 2026Contributor·

  ·

  · the-overflow-parking-lot
  1

• feat(charts): keycloak official image

  #1671·omrishiv opened Aug 20, 2026Contributor·

  ·

• Remove public-DNS resolver default for dynamic proxy_pass; log/meter backend 502s

  #1522·soheilkhan opened Jul 20, 2026Contributor·

  ·
  1

• feat(egress): client-side Dynamic Client Registration for Atlassian Rovo authv2

  awaiting-author
  #1519·go-faustino opened Jul 20, 2026Contributor·

  ·
  15