What's Changed
- [TT-17607] ci: add if condition to dep-guard job in plugin-compiler-build by @probelabs[bot] in #8347
- [TT-17578] Bump graphql-go-tools to fix Federation subscription-then-query null regression by @mativm02 in #8345
- [TT-17585] MinTokenLength: apply the default floor of 3 to the create-time guard by @sedkis in #8346
- fix: bump aws-sdk-go-v2/service/s3 to v1.97.3 to fix CVE GHSA-xmrv-pmrh-hhx2 by @probelabs[bot] in #8380
- fix: bump aws-sdk-go-v2 kinesis and lambda to fix CVE GHSA-xmrv-pmrh-hhx2 by @probelabs[bot] in #8387
- TT-17688: test: add local httpbin.org mock to smoke tests by @probelabs[bot] in #8409
- TT-17670 Fix vulnerable stream dependencies by @buger in #8410
- [TT-17606] Fix raw cert space trimming by @MFCaballero in #8386
- [TT-17689] Update httpbin image to mccutchen/go-httpbin in tests by @probelabs[bot] in #8426
- TT-17689: Fix httpbin port mismatch (renamed branch) by @probelabs[bot] in #8438
- [TT-17507] Move jira-linter into github-actions mono-repo by @buraksezer in #8366
- DX-2386: Revert httpbin test-infra migration to pre-migration baseline by @probelabs[bot] in #8448
- [TT-17316] Shutdown signal logs do not follow configured logging form… by @radkrawczyk in #8424
- [TT-17417] docs: update swagger version to 5.14.0 by @bsten-tyk in #8463
- [TT-5893] Error Log: "Couldn't find a matching policy for scope item" should be optional by @shults in #8401
- [releng master] gromit: sync templates by @probelabs[bot] in #8312
- [TT-16259] [Security] Unable to delete Session that uses a quota and is under heavy load by @shults in #8456
- [releng master] gromit: sync templates by @probelabs[bot] in #8495
- TT-16948: Upgrade JSVM engine from Otto to Goja by @sedkis in #7975
- [TT-17415] Address docs review feedback on config doc comments by @mativm02 in #8488
- [TT-6176] Add bundling support for analytics plugin by @MaciekMis in #8367
- TT-17667: enforce Sonar lint rules by @olamilekan000 in #8453
- [TT-14798] [OAS] Tyk returns invalid JSON in API responses by @shults in #8511
- [releng master] gromit: sync templates by @probelabs[bot] in #8520
- TT-17415: Changes from tyk-docs review by @imogenkraak in #8512
- TT-17319 REST-as-MCP catalogue and configuration foundation by @andrei-tyk in #8262
- [TT-17846] Update dependency-guard.yml to use @production tag by @probelabs[bot] in #8531
- [TT-17186] token exchange observability by @lghiur in #8279
- [TT-17580] Add JWT bearer grant (RFC 7523) to OAuth2 token exchange by @lghiur in #8466
- TT-17509: Disable vulnerability scanning in S1 PR workflow by @probelabs[bot] in #8535
- [TT-16039] Add configurable client authentication method for upstream OAuth by @mativm02 in #8499
- TT-17611: GCP IAM auth for Memorystore Redis/Valkey by @sedkis in #8402
- [TT-15516] Fix authenticated GraphQL playground with GraphiQL 1.11.5 by @chrisanderton in #8510
- [TT-17631] Dashboard allows ListenPath without leading slash causing Gateway failure- #4433 by @MFCaballero in #8537
- TT-17848: return 401 (not 400) on missing auth for PRM-enabled APIs by @edsonmichaque in #8532
- TT-17102: Adapt KV resolution logic to storage/kv by @vladzabolotnyi in #8468
- TT-17868 Upgrade Go version from 1.25 to 1.26 by @rafalgolarz in #8547
- [releng master] gromit: sync templates by @probelabs[bot] in #8563
- TT-17868 fix mockgen stale-cache after Go version bump by @rafalgolarz in #8572
- [releng master] gromit: sync templates by @probelabs[bot] in #8573
- [releng release-5.15.0] gromit: sync templates by @probelabs[bot] in #8613
- Merging to release-5.15.0: TT-17795: bump golang.org/x/text and google.golang.org/grpc for CVE fixes (#8582) by @probelabs[bot] in #8607
- Merging to release-5.15.0: TT-17795: update version of TykTechnologies/opentelemetry with fixed CVEs (#8614) by @probelabs[bot] in #8616
- [releng release-5.15.0] gromit: sync templates by @buger in #8620
- TT-17641: [releng release-5.15.0] gromit: sync templates by @probelabs[bot] in #8634
- Merging to release-5.15.0: TT-17795: Update path for avro's replace directive and fix new CVEs (#8626) by @probelabs[bot] in #8636
- Merging to release-5.15.0: [TT-17921] Improve header handling for GraphQL-based APIs (#8602) by @probelabs[bot] in #8643
- Update go.mod and go.sum to bump tyk-pump version to v1.17.0-rc4 by @ilijabojanovic in #8656
- Merging to release-5.15.0: [TT-18136] Tolerate stale MCP selectors on catalogue reads (#8653) by @probelabs[bot] in #8658
- Update go.mod and go.sum to bump tyk-pump version to v1.17.0 by @ilijabojanovic in #8668
Full Changelog: v5.14.0...v5.15.0