## mckinsey/agents-at-scale-ark — v0.1.68-rc…v0.1.68-rc.1

_19 commits._

### Features
- **feat: MCP token re-generation between agent and MCPServer (#3126)** (20a439c)
- **feat(controller): fail Query on spec.timeout elapsed with TimedOut* reason (#3027)** (b0acbef)

### Fixes
- **fix(mcp): revert go-sdk to v1.6.1 restoring pre-2026-07-28 MCP server support (#3220)** (c638642)
- **fix(apiserver): ack the server WAL position so an idle publication cannot pin cluster WAL (#3023)** (3dfc9ce)
- **fix(executor): dispatch team members to named execution engines (#3185)** (9ba64b0)
- **fix(ark-broker): Add NODE_OPTIONS heap limit and expose cache metrics (#3093)** (be4fdb3)
- **fix(ark-broker): terminal query phase lost when a reordered non-terminal event raises the sequence watermark (#3209)** (adef3a1)
- **fix: auditing & admission policy gap in ARK's aggregated (PostgreSQL) apiserver (#3053)** (9d47f49)
- **fix(security): bump golang.org/x/mod to 0.40.0 for CVE-2026-56864/56865 (#3215)** (e9f092e)
- **fix(security): bump nanoid to 3.3.18 in docs to fix CVE-2026-67213 (#3212)** (26d4d0b)
- **fix(security): resolve Xray CVE violations (nanoid whitelist + Go 1.26.6 bump) (#3206)** (2c77b35)
- **fix(postgresql): resume watch from client resourceVersion (#3120)** (9f31269)
- **fix(deps): bump cryptography to 50.0.0 in ark-mcp (#3192)** (44f56b2)
- **fix(deps): patch nanoid and postcss for remaining Dependabot CVEs (#3191)** (46491eb)

### Tests
- **test: fix flaky postgres broker test (#3172)** (ec344e6)

### Docs
- **docs: Release process and authentication scopes (#3029)** (fe78402)

### Chore
- **chore(main): release 0.1.68-rc.1 (#3202)** (96b0607)
- **ci: harden postgres integration job (NodePort + calico download retry) (#3216)** (dd9a880)
- **chore(fark): remove committed golangci-lint binary from tools/fark/bin (#3211)** (c809d51)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/mckinsey/agents-at-scale-ark?utm_source=github-action)._