## IBM/mcp-context-forge — v1.0.6…v1.0.7

_59 commits._

### Features
- **feat: consume Cpex control execution records (#6003)** (7c042d2)
- **feat(api): add prompt and resource counts to GatewayRead (#5657)** (a48826b)
- **feat(observability): improve upstream MCP session error diagnostics (#5631)** (042c9fc)
- **feat(dataplane): publish per-backend add_headers/remove_headers (#5924)** (9d89207)
- **feat(api): support popup-based authorization flow for React UI (#5661)** (9232a1c)
- **feat(teams): support bulk member creation in TeamCreateRequest (#5626)** (757d899)
- **Add v1 catalog API (#5544)** (3fcca88)
- **feat(search): add versioned GET /v1/search unified search endpoint (#5610)** (471cb04)

### Fixes
- **fix(db): remove blocking unique constraint for multi-user DCR clients (#5198)** (e891128)
- **Fix: Enforce API Token Scope-Based Access Control (#4737)** (e77f25d)
- **fix(mcp-apps): honour deprecated flat ui/resourceUri metadata key (#5764)** (8b2d45b)
- **fix: remove Python comment from JavaScript code in OAuth callback (#5997)** (6ecace9)
- **fix(s390x): Downgrade Vite from 8 to 7 (#5958)** (0192fec)
- **fix: harden REST tool outbound validation (#5925)** (75e9ccc)
- **fix: use opaque dataplane subject ids (#5708)** (4a2d41f)
- **fix(security): harden A2A admin edit authorization (#5922)** (eb1e212)
- **fix(resources): show specific message for duplicate resource URI conflicts (#5920)** (25db326)
- **fix(csrf): return 401 for unauthenticated write requests instead of misleading 403 (#5917)** (080ef7e)
- **fix(admin-ui): fix CSRF failures on LLM Settings writes (#5780)** (0d6aef0)
- **fix-test-waits (#5927)** (e1bbc75)
- **fix(llmchat): allow any worker to resume LLM Chat sessions from Redis (#5790)** (2348a25)
- **Fix redis connection leak (#5711)** (bf9130a)
- **fix(mcp): resolve session-token sub UUID to email in streamable-HTTP auth (#5802)** (3fe3035)
- **fix: Force install of rollup fallback on s390x (#5836)** (328f950)
- **fix(search): token-scope team results for admins in unified search (#5668)** (7d08ba5)
- **fix(docker-compose): restore gateway HOST binding and fast-time-server startup (#5808)** (534b9d2)
- **fix(auth): enforce safe admin demotion rules (#5644)** (3d538c7)
- **fix(docker): bump UBI_MINIMAL to pick up patched libpq (CVE-2026-6477) (#5809)** (5a87740)
- **fix detect secrets (#5788)** (3941443)
- **[FIX]: Increase health check timeout from 5s to 30s and reset failure counter on recovery (#4862)** (a86d68a)
- **fix: Vite rollup fallback on s390x (#5779)** (5713c1a)
- **fix(rbac): add unique constraints for role/user_role race (#4482)   (#4636)** (77805b8)
- **fix(gateways): resolve authorization_code OAuth gateway offline issues (#5244)** (0fbf794)
- **fix(helm): resolve Helm chart linting issues (#5269)** (7a22fa4)

### Backend
- **Release 1.0.7 (#6039)** (4092d33)
- **Merge commit from fork** (f21b61c)
- **Follow-on refinements to Docker Security Scan job (#5438)** (7dab401)
- **[FEATURE]: OAuth Resource UI field, origin fallback, and softened auto-derived validation (#4476)** (ef2ded1)
- **Merge commit from fork** (0247d07)
- **Merge commit from fork** (ba6c7e7)
- **Merge commit from fork** (e38a9ce)
- **Merge commit from fork** (3f3aa17)
- **Docs/5693 update ocp pgo documentation (#5749)** (7e09928)
- **Merge commit from fork** (5a37adc)

### Docs
- **docs: update architecture roadmap and add release history (#6037)** (db8acbc)
- **docs: document CSRF protection, middleware ordering, and LLM admin endpoints (#5959) (#5979)** (24e923c)

### Chore
- **chore: bump cryptography to 50.0.0 (#6035)** (72eea5f)
- **refactor(middleware): extract auth-context middleware registration into testable submodule (#6008)** (a27a3f7)
- **refactor(plugins): replace in-tree sql_sanitizer with cpex-sql-sanitizer (#5961)** (2f3d67e)
- **chore: update python dependencies (#5919)** (8bb5f5a)
- **ci: create .env before compose-up in prod smoke check (#5923)** (1b555bc)
- **chore: pin mcp>=1.28.1,<2 ahead of MCP Python SDK v2 stable release (#5840)** (91f8920)
- **ci: add compose production smoke check (#5756)** (4ed6b01)
- **chore: fix pip-audit (#5787)** (6582992)
- **chore: developer tooling housekeeping — git hooks, secrets-scan tooling, agent docs, ignore files (#4453)** (a6e156e)
- **chore(deps): bump cpex-secrets-detection to 0.3.10 (#5775)** (a0ed2f3)
- **chore: remove obsolete redis_fallback config references (#5645)** (cb58076)
- **refactor: remove Granian HTTP server option (#5607)** (666bfbf)
- **ci: enable all arch build for workflow_dispatch manual trigger (#5751)** (921c7e9)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/IBM/mcp-context-forge?utm_source=github-action)._