v0.27.0

What's Changed

• fix(deps): update dependency nanoid to ^5.1.7 by @renovate[bot] in #1885
• fix(deps): update dependency sonner to ^2.0.7 by @renovate[bot] in #1886
• fix(deps): update dependency @modelcontextprotocol/sdk to ^1.29.0 by @renovate[bot] in #1889
• fix(ci): validate release tag starts with 'v' prefix by @peppescg in #1888
• feat(newsletter): open newsletter modal from help dropdown by @samuv in #1890
• fix(deps): update tanstack-router monorepo by @renovate[bot] in #1887
• chore(deps): update dependency typescript-eslint to ^8.58.0 by @renovate[bot] in #1894
• chore(deps): update dependency prettier-plugin-classnames to ^0.10.1 by @renovate[bot] in #1893
• chore(renovate): add minimumReleaseAge of 3 days by @peppescg in #1881
• fix(registry): show secrets and env vars sections when registry has none pre-defined by @peppescg in #1891
• fix(test): suppress vite swc and jsdom scrollTo warnings by @samuv in #1884
• fix(routing): resolve TanStack Router file-ignore and code-split warnings by @samuv in #1892
• chore(deps): update anthropics/claude-code-action digest to bee87b3 by @renovate[bot] in #1898
• fix(deps): update dependency lucide-react to ^0.577.0 by @renovate[bot] in #1899
• chore(deps): update dependency tmp to >=0.2.5 by @renovate[bot] in #1896
• chore(deps): update node.js to v24.14.1 by @renovate[bot] in #1895
• feat(skills): add skills page with list, install, uninstall and build under feature flag by @samuv in #1878
• fix(security): override @xmldom/xmldom >=0.8.12 (CVE-2026-34601) by @samuv in #1901
• fix(deps): update dependency react-hook-form to v7.72.0 by @renovate[bot] in #1900
• chore(deps): update actions/create-github-app-token action to v3 by @renovate[bot] in #1902
• chore(deps): update dependency electron to v41 by @renovate[bot] in #1904
• chore(deps): update pnpm/action-setup action to v5 by @renovate[bot] in #1905
• fix(security): override lodash-es >=4.18.0 (CVE-2026-4800, CVE-2026-2950) by @toolhive-studio-ci[bot] in #1907
• chore(deps): update anthropics/claude-code-action digest to 58dbe8e by @renovate[bot] in #1906
• chore(deps): update docker/setup-buildx-action action to v4 by @renovate[bot] in #1908
• fix(flags): put isexperimental to false for skills by @samuv in #1911
• feat(permissions): gate Playground and Registry tab behind permission keys by @peppescg in #1912
• fix(security): override lodash >=4.18.0 (CVE-2026-4800, CVE-2026-2950) by @toolhive-studio-ci[bot] in #1913
• chore(deps): update anthropics/claude-code-action digest to 0432df8 by @renovate[bot] in #1914
• fix(deps): update tanstack-query monorepo to ^5.96.1 by @renovate[bot] in #1903
• fix(clients): sort clients alphabetically in Manage Clients modal by @danbarr in #1918
• fix(security): override defu >=6.1.5 (CVE-2026-35209) by @toolhive-studio-ci[bot] in #1920
• fix(registry): strip namespace prefix from default server name by @danbarr in #1919
• chore(deps): update dependency defu to >=6.1.6 by @renovate[bot] in #1922
• chore(deps): update anthropics/claude-code-action digest to 6e2bd52 by @renovate[bot] in #1921
• fix(security): upgrade vite to 8.0.5 (GHSA-v2wj-q39q-566r, GHSA-p9ff-h696-f583, GHSA-4w7w-66w2-5vf9) by @toolhive-studio-ci[bot] in #1926
• chore(deps): update dependency stacklok/toolhive to v0.15.0 by @renovate[bot] in #1925
• fix(version-tab): remove errant "update not available" toast by @peppescg in #1924
• feat(sentry): add distributed tracing between Studio and ToolHive API by @samuv in #1916
• fix(version-tab): gate download banner behind auto-update permission by @peppescg in #1929
• feat(mcp-optimizer): sunset deprecation banner and hide experimental toggle by @samuv in #1910
• chore(deps): update aws-actions/configure-aws-credentials digest to ec61189 by @renovate[bot] in #1928
• chore: add CLAUDE.md and AGENTS.md for AI coding assistants by @peppescg in #1930

Full Changelog: v0.26.0...v0.27.0