## IBM/mcp-context-forge — v1.0.7…v1.0.8

_37 commits._

### Features
- **feat: add frontend-compatible email links (#6209)** (2c66e51)
- **feat(plugins): support A2A agents in Vault plugin (#6079)** (4c29399)
- **feat: migration script for auth_secret (#6216)** (6004d23)
- **feat: add --csv and --html output to benchmark-mcp-tools (#6210)** (6a16c56)
- **Add explicit RBAC permissions to OAuth registered-client management (#6109)** (28fe8a7)
- **feat(api): non-admin v1 catalog register endpoint (#5974)** (b94c720)
- **feat(mcp-apps): support standard MCP messages over the AppBridge (#5765)** (4a1e3ea)
- **feat: add v1 plugin discovery API (#5983)** (65c6b52)

### Fixes
- **fix(search): include opt-in catalog results (#6245)** (f32b210)
- **fix(security): sandbox jq filter execution for tool jsonpath_filter (#6205)** (14dcfec)
- **fix(admin): bind login CSRF cookie to email and session jti (#6111)** (123c4ca)
- **fix(oauth): add tool-discovery trigger for token-exchange gateways (#6162)** (70cd715)
- **fix: improve Test Connection error messages (#5930)** (13d971d)
- **fix(ci): scope branch coverage to the pytest step to fix combine crash (#6208)** (e4fd281)
- **Fix/team id filter all list endpoints (#6152)** (41a6580)
- **fix: omit transport from dataplane config (#6174)** (28c9695)
- **fix(gateway): report failure when refreshing an unauthorized auth_code gateway (#6128)** (3b47400)
- **fix(admin-ui): attach CSRF header to import preview and configuration writes (#6161)** (9a547ed)
- **fix: benchmark-mcp-tools tool-argument, denylist, and pool-cap drift (#6082) (#6136)** (7798e9c)
- **fix: make dist no longer wipes venv; MANIFEST.in toml glob breaks make verify (#6093)** (9791b6b)
- **fix(chore): centralize Layer-1 visibility filter across REST endpoints (#4654)** (adcf9b7)
- **fix(teams): scope admin team listings by token teams (#6091)** (c9d1fa5)
- **fix secretts.baseline (#6124)** (ccf7bf8)

### Backend
- **Release/1.0.8 (#6268)** (a5b96fb)
- **Bh/remove py sandbox (#6191)** (c5476d4)
- **Filtered gateways by team_id (#5929)** (0878368)
- **Merge commit from fork** (ee67655)
- **fixup: secret baseline** (48445d1)

### Tests
- **test(sso): move Entra ID integration test to tests/integration (#6217)** (151e870)

### Chore
- **chore: remove cpex_compat.py shim since cpex>=0.1.2 is declared (#6231)** (e5d6050)
- **chore: remove stale suggestion-mode option from .pylintrc (#6234)** (28806e1)
- **chore(tests): replace fastmcp with the official mcp SDK in live-gateway tests (#6125)** (68ffeb9)
- **chore: restore AUTH_ENCRYPTION_SECRET unconditional strength enforcement (#6108)** (38cb96f)
- **chore: remove experimental Rust request-logging masking extension (#6133)** (4fe9ebb)
- **chore: routine npm/rust dependency updates (#6160)** (2533c25)
- **chore: update python dependencies/update min supported version to py3.12 (#6158)** (dcd8c79)
- **chore: patch timeouts for additionals span (#6131)** (eaf295e)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/IBM/mcp-context-forge?utm_source=github-action)._