ci: bump berntpopp/genefoundry-router/.github/workflows/_container-ci.yml from 0.7.6 to 0.8.2

[dependabot]

Bumps berntpopp/genefoundry-router/.github/workflows/_container-ci.yml from 0.7.6 to 0.8.2.

Release notes

Sourced from berntpopp/genefoundry-router/.github/workflows/_container-ci.yml's releases.

v0.8.2

Verified GeneFoundry research-use-only container release.

v0.8.1

Verified GeneFoundry research-use-only container release.

v0.8.0

Verified GeneFoundry research-use-only container release.

Changelog

Sourced from berntpopp/genefoundry-router/.github/workflows/_container-ci.yml's changelog.

Changelog

All notable changes to genefoundry-router are documented here.

[0.8.2] - 2026-08-10

Changed

• Re-pin the drift baseline to fleet-2026-08-10-dependency-remediation. All 21 backends were re-released to land their accumulated Dependabot updates, so every image digest and source revision moved and the packaged baseline no longer described the running fleet. Regenerated the whole evidence set from the live fleet with make release-candidate + make snapshot-baseline, both of which fail closed on any digest mismatch, so this cannot launder a backend that was not released.
• Reviewed the tool contract rather than trusting the digests: 272 tools across 21 namespaces before and after, none added, none removed, none changed. These were dependency and CI releases; they do not touch the MCP surface, which is why no tool was quarantined while the backends rolled out.

[0.8.1] - 2026-08-10

Security

• Publish the tested dependency and CI maintenance sweep with refreshed pinned CodeQL and Docker login actions and patched runtime dependencies.

Changed

• Update Uvicorn, Typer, Ruff, and the locked dependency set without changing the router API or fleet contract.

[0.8.0] - 2026-08-07

Fixed

• Pin the attested production fleet to GTEx Link 3.1.3, PanelApp Link 0.7.0, and UniProt Link 5.1.0. PanelApp 0.7.0 moves its refresh status from the top-level response into health.refresh; MCP clients consuming that diagnostic shape must read the nested field.
• Canonicalize router-issued OAuth access and refresh token issuers to https://genefoundry.org. Tokens minted by earlier releases with the historical trailing-slash issuer remain valid only through the fixed transition deadline 2026-09-06T00:00:00Z; no arbitrary legacy issuer is accepted. Connectors that cached the old authorization-server identifier may reject the new metadata before token validation and require disconnect/re-add; an issuer-mismatch during discovery is the distinguishing symptom.

Added

... (truncated)

Commits

• 59050ea deploy: re-pin the drift baseline to fleet-2026-08-10 and release v0.8.2 (#141)
• 6abef70 release: prepare v0.8.1 (#140)
• 009995b deps: consolidate Dependabot updates (#139)
• 2d21119 fix: canonicalize OAuth issuer and observe refresh rotation (#133)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)