## IBM/mcp-context-forge — v1.0.8…v1.0.9

_42 commits._

### Features
- **feat: add gateway-side TLS override for end-to-end HTTPS (closes #6266) (#6422)** (badfa01)
- **feat: Add preview functions to the tools service (#6360)** (f4c8198)
- **feat: add MCP Apps live stack tests to TestRawJsonRpc (#6306)** (81ab4a8)
- **feat(tls): add inbound mTLS (client certificate authentication) support (#6352)** (f4057a7)
- **feat: support catalog gateway actions in backend (#6355)** (db3357a)
- **feat: Add experimental UI to compose (#6320)** (017bf02)
- **feat: publish tool schemas to dataplane (#6348)** (2bf3f70)
- **Add 2 new paths as versioned API aliases (#6257)** (f9af132)
- **feat: Add new permission for tool preview (#6321)** (ecba50e)
- **feat(auth): add session refresh and validate endpoints (#6235)** (c6cfe8b)
- **feat(api): add MCP handshake test endpoint for Test Connection (#5934)** (7454e87)
- **feat(python): MCP server OAuth form quick wins (read-only redirect URI, drop password grant) (#6315)** (e16896b)

### Fixes
- **[FIX]: expose tls cipher suite  (#6483)** (ffcc082)
- **fix(mcp): cache StatefulHTTP JWT admin lookups (#6437)** (7d20783)
- **fix: normalize bundled catalog icon bounds (#6441)** (354ae82)
- **fix: enforce component-aware directory confinement on admin log download (#6393)** (555a9f3)
- **fix: add MCP handshake test endpoint for virtual servers (#6405)** (59cee74)
- **fix(gateway): reject/strip invisible Unicode in stored auth credentials (#6350)** (ff1fcc8)
- **fix: render gateway/tool/prompt/resource audit rows correctly in activity feed (#6351)** (469e0b8)
- **fix: default token creation to creator's personal team (#5993) (#6354)** (d441263)
- **tests: fix Playwright gateway OAuth and team flakiness (#6398)** (3d5b27d)
- **fix: bump pinned UBI10 base image tags to pick up python3 CVE fix (#6413)** (8c9c6c1)
- **fix: harden local A2A egress handling (#6399)** (459c388)
- **fix: remove deprecated PUT /admin/users endpoint and add sunset marker pre-commit hook (#6304)** (48e12d3)
- **fix: add missing migration columns to migrate_enc_secret  (#6324)** (f963af3)
- **fix(ci): raise clippy large-error-threshold for mcp_runtime (#6349)** (a8bbf2e)
- **fix: recreate CI venv when cached Python symlink is broken (#6302)** (d578704)

### Backend
- **Release/1.0.9 (#6486)** (f909289)
- **[CHORE]: Remove fast_test_server; consolidate load tests (#6192)** (cca5f97)
- **Security Hardening: Catalog Registration Scope Enforcement (#6247)** (89a2dec)
- **[Feature]: SSL/TLS exposed for gateway pods (#6362)** (e8b3d51)
- **[CHORE]: Automate MCP server catalog icon generation (#6397)** (b1cb296)
- **[FEATURE] Pluggable OAuth Token Storage with HashiCorp Vault Backend (#5599)** (a7dcfde)
- **Pr 5973 rebase (#6292)** (8af4962)
- **Pr 6009 rebase (#6293)** (aad5d7d)

### Docs
- **docs: require live black-box tests where applicable (#6326)** (ba80315)
- **docs(translate): document dynamic env production risk (#6388)** (b3f1e9d)

### Chore
- **chore(deps): perform routine python/node dependency updates (#6375)** (fe7b6ca)
- **chore: tool invoke function refactor (#6325)** (8d9f0cb)
- **chore: .env.example cleanup (#6319)** (b935ccd)
- **chore: bump dependency-review-action from v4.9.0 to v5.0.0 (#6312)** (1de7c96)
- **chore: remove temporary min-release-age-exclude pins from .npmrc (#6301)** (6df2cd4)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/IBM/mcp-context-forge?utm_source=github-action)._