From 9ef2311c7147e75c9a143d6e29d56602de4b6a8d Mon Sep 17 00:00:00 2001
From: "renovate-bot-cbcoutinho[bot]"
 <210269379+renovate-bot-cbcoutinho[bot]@users.noreply.github.com>
Date: Thu, 30 Oct 2025 23:08:17 +0000
Subject: [PATCH 1/2] chore(deps): update ghcr.io/astral-sh/uv docker tag to
 v0.9.7

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index c1dba67..045ef68 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/astral-sh/uv:0.9.6-python3.11-alpine@sha256:b2a366adae7002a23dbba79791baac4e607ee5af5d45039d072d30115c505666
+FROM ghcr.io/astral-sh/uv:0.9.7-python3.11-alpine@sha256:0006b77df7ebf46e68959fdc8d3af9d19f1adfae8c2e7e77907ad257e5d05be4
 
 # Install git (required for caldav dependency from git)
 RUN apk add --no-cache git

From 02a2c4a16fe68077525d6215cbc1ee5739e9838b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Mon, 3 Nov 2025 01:48:39 +0000
Subject: [PATCH 2/2] =?UTF-8?q?bump:=20version=200.22.7=20=E2=86=92=200.23?=
 =?UTF-8?q?.0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 CHANGELOG.md                           | 22 ++++++++++++++++++++++
 charts/nextcloud-mcp-server/Chart.yaml |  4 ++--
 pyproject.toml                         |  2 +-
 uv.lock                                |  2 +-
 4 files changed, 26 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index aa48a81..88411ab 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,25 @@
+## v0.23.0 (2025-11-03)
+
+### Feat
+
+- Auto-configure impersonation role in Keycloak realm import
+- Implement dual-tier token exchange (Standard V2 + Legacy V1 impersonation)
+- Add Keycloak external IdP integration with custom scopes
+- Implement RFC 8693 token exchange for Keycloak (ADR-002 Tier 2)
+- Add Keycloak OAuth provider support with refresh token storage
+
+### Fix
+
+- Complete Keycloak external IdP integration with all tests passing
+- Complete Keycloak external IdP integration with all tests passing
+- Update DCR token_type tests for OIDC app changes
+
+### Refactor
+
+- Remove NEXTCLOUD_OIDC_CLIENT_STORAGE environment variable
+- Remove unnecessary user_oidc patch - CORSMiddleware patch is sufficient
+- Unify OAuth configuration to be provider-agnostic
+
 ## v0.22.7 (2025-10-29)
 
 ### Fix
diff --git a/charts/nextcloud-mcp-server/Chart.yaml b/charts/nextcloud-mcp-server/Chart.yaml
index 0942852..2324d18 100644
--- a/charts/nextcloud-mcp-server/Chart.yaml
+++ b/charts/nextcloud-mcp-server/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: nextcloud-mcp-server
 description: A Helm chart for Nextcloud MCP Server - enables AI assistants to interact with Nextcloud
 type: application
-version: 0.22.7
-appVersion: "0.22.7"
+version: 0.23.0
+appVersion: "0.23.0"
 keywords:
   - nextcloud
   - mcp
diff --git a/pyproject.toml b/pyproject.toml
index e8b6317..fe14fee 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "nextcloud-mcp-server"
-version = "0.22.7"
+version = "0.23.0"
 description = "Model Context Protocol (MCP) server for Nextcloud integration - enables AI assistants to interact with Nextcloud data"
 authors = [
     {name = "Chris Coutinho", email = "chris@coutinho.io"}
diff --git a/uv.lock b/uv.lock
index ca66afc..1ea503d 100644
--- a/uv.lock
+++ b/uv.lock
@@ -954,7 +954,7 @@ wheels = [
 
 [[package]]
 name = "nextcloud-mcp-server"
-version = "0.22.7"
+version = "0.23.0"
 source = { editable = "." }
 dependencies = [
     { name = "aiosqlite" },