Final release for v0.4.0.

This release adds an exported host function called get_access_token that allows plugins to get access tokens for the protected resources that they use. It supports client credentials flow and device code flow. The latter requires that the MCP client (the agent) support elicitation to verify user credentials. It also automatically supports refreshing the access token if the IdP returns a refresh token.

Included:

• hyper-mcp binaries for Linux & macOS
• hyper-mcp container image: ghcr.io/hyper-mcp-rs/hyper-mcp:v0.4.0

✅ Multi-arch digest (immutable, recommended for pinning):

• ghcr.io/hyper-mcp-rs/hyper-mcp@sha256:a3ff54c4d5fd07c978395349eb2ce7592583b09b23b31600bcfc47857b6fa2b2

All container images are signed with Cosign. Verify with:

cosign verify   --certificate-identity "https://github.com/hyper-mcp-rs/hyper-mcp/.github/workflows/release.yml@refs/tags/v0.4.0"   --certificate-oidc-issuer "https://token.actions.githubusercontent.com"   ghcr.io/hyper-mcp-rs/hyper-mcp@sha256:a3ff54c4d5fd07c978395349eb2ce7592583b09b23b31600bcfc47857b6fa2b2

What's Changed

• github-actions Update actions/checkout action to v6.0.2 by @renovate[bot] in https://github.com/hyper-mcp-rs/hyper-mcp/pull/172

Full Changelog: https://github.com/hyper-mcp-rs/hyper-mcp/compare/v0.3.1...v0.4.0