[bananaops-release-please]

🤖 I have created a release beep boop

0.22.0 (2026-11-12)

✨ Features

• auth: local accounts, teams, permissions and API keys (#200) (31259c3)
• auth: OpenID Connect login with team mapping (#214) (1b85a9a)
• auth: per-service team scope (#216) (0d06106)
• mcp: serve the MCP endpoint from the Go server (#238) (ecede31)
• web: design system foundations (lot 1) (#263) (f52c08e)

🐛 Bug Fixes

• audit follow-ups, date ranges, scope and frontend bugs (#251) (93c719d)
• auth: enforce the forced password change on the server (#217) (8f3a9ef)
• correct the bugs found by the backend audit (#250) (ebbd362)
• deps: bump Go, web and CI dependencies, Swagger UI on docui (#255) (12ac969)
• deps: patch axios, moment and brace-expansion advisories (#215) (f359d84)
• deps: patch follow-redirects, source-map-js, vite and zod advisories (#236) (7dedf58)
• deps: upgrade react-router-dom to v7 and patch vulnerable transitive packages (#202) (a4f9afc)
• deps: upgrade tailwindcss to v4 and eslint to v10 (#206) (6723448)
• docker: run container as non-root user (#198) (1769020)
• web: keep the catalog SLA, clear every lint warning (#253) (9e4c988)
• web: normalize event enums at the API layer, move the docs page (#254) (a87d044)
• web: zero type and lint errors, dead code removed, Vitest and web CI (#252) (393648c)

⚡ Performance Improvements

• list and search results carry only the approvals of the changelog (#259) (a7a535b)
• paginate ListEvents, gzip the HTTP responses, cache the assets (#257) (a39d22a)
• web: load each page on demand, React in its own chunk (#258) (ec26ef5)

📖 Documentation

• add CLAUDE.md for project guidance and command instructions (5d3dc27)
• update CLAUDE.md for improved clarity and command structure (e2475e5)

👷 CI/CD

• bump charts to 0.21.1 (a7906b7)
• include dependabot updates in release-please (#237) (57c1b8f)
• stop labelling fork pull requests in the PR title check (#207) (c9edcd8)
• update all GitHub Actions to their latest major versions (#205) (48e03d7)

🔧 Chores

• deps: bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#218) (e9ba59b)
• deps: bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#212) (6c089c9)
• deps: bump google.golang.org/grpc from 1.83.2 to 1.84.0 (#210) (bf7bd51)
• deps: bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (#211) (5cb2ad5)
• mcp: remove the deprecated Python MCP server (#260) (4cb85c7)

---

This PR was generated with Release Please. See documentation.

[bananaops-release-please]

🤖 Created releases:

• v0.22.0

🌻