chore(main): release 0.12.0

[push-tags-from-workflow]

🤖 I have created a release beep boop

0.12.0 (2026-07-01)

Features

• add agents.md (#307) (6afc82f)
• add client data CreatedAt timestamp (#293) (5bc7388)
• handle blocked tenant error (#251) (abb7a2a)
• propagate trace context (#319) (bb67a00)

Bug Fixes

• bearer token introspection for tenant related requests (#320) (ee99adb)
• bump Go toolchain to v1.26.4 (#309) (4b030c5)
• bump toolchain (#279) (db7ee34)
• cedar request handling and policy configuration (#303) (ca5cd57)
• certificate handling (#305) (df3b27d)
• const error code declarations (#290) (55c0305)
• CxOne and linter findings (#298) (f4a14f2)
• CxONE reported race condition (#311) (eac6357)
• deps: bump actions/checkout from 6 to 7 (#317) (2c18e2e)
• deps: bump distroless/static-debian12 from a932952 to d093aa3 (#296) (7092a85)
• deps: bump github.com/openkcm/api-sdk from 0.17.0 to 0.18.0 in the gomod-group group across 1 directory (#314) (3b3b704)
• deps: bump google.golang.org/grpc from 1.79.2 to 1.79.3 (#265) (2353266)
• deps: bump google.golang.org/grpc from 1.80.0 to 1.81.0 in the gomod-group group (#294) (8f5880b)
• deps: bump the gomod-group group across 1 directory with 2 updates (#269) (d3f43ac)
• deps: bump the gomod-group group across 1 directory with 3 updates (#302) (f2ed305)
• deps: bump the gomod-group group across 1 directory with 7 updates (#278) (9279577)
• deps: bump the gomod-group group with 2 updates (#297) (538262f)
• deps: bump the gomod-group group with 2 updates (#318) (07ced2b)
• deps: bump the gomod-group group with 3 updates (#310) (5abd1c6)
• do not automount service account token (#264) (9704b1a)
• do not log the client data signature (#283) (f2ec0bb)
• enforce CSRF checks (#287) (56f80cd)
• helm: make image.tag or image.digest mandatory (#295) (2b583fb)
• potential race condition (#304) (28b5289)
• race condition reported by CxONE (#300) (acb2fc6)
• Remove browser fingerprint (#312) (7cb887d)
• remove critical flags (#288) (f21ca7a)
• remove dependency (#299) (7f09861)
• remove dependency github.com/go-andiamo/splitter (#268) (6f947a6)
• replace outdated package (#286) (cdf3bc2)
• sha256 hashing (#292) (b3a5be4)
• switch in-memory cache implementation (#280) (dd84a82)
• update common-sdk to fill up new ttl field on clientdata encode (#315) (8b5a17a)
• update toolchain and vulnerable dependencies (#306) (4088142)
• use a hash as cache key (#289) (0c8daf1)
• use an actively maintained yaml package (#270) (30b918f)
• use int32 for the status code (#313) (2266ad3)
• vulnerabilities in golang.org/x/* (#308) (cee4924)

---

This PR was generated with Release Please. See documentation.

[push-tags-from-workflow]

🤖 Created releases:

• v0.12.0

🌻