build(deps): bump github.com/plexusone/omniskill from 0.10.0 to 0.12.0

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps github.com/plexusone/omniskill from 0.10.0 to 0.12.0.

Release notes

Sourced from github.com/plexusone/omniskill's releases.

v0.12.0

Release Notes: v0.12.0

Full Changelog: plexusone/omniskill@v0.11.0...v0.12.0

v0.11.0

Release Notes: v0.11.0

Full Changelog: plexusone/omniskill@v0.10.0...v0.11.0

Changelog

Sourced from github.com/plexusone/omniskill's changelog.

[v0.12.0] - 2026-08-09

Highlights

• mcp/oauth2: external TokenVerifier seam lets a server run as a pure OAuth resource server against externally-issued tokens (enterprise IdP / ID-JAG), instead of the built-in authorization server
• TokenInfo carries an RFC 8693 actor delegation chain and raw claims from external tokens into request context

Added

• mcp/oauth2: TokenVerifier interface and TokenVerifierFunc adapter for pluggable external token verification (947d8c1)
• mcp/oauth2: ExternalBearerMiddleware validates bearer tokens via an injected TokenVerifier and stores TokenInfo in context, with RFC 9728-compliant WWW-Authenticate challenges (947d8c1)
• mcp/oauth2: ExternalProtectedResourceMetadataHandler serves RFC 9728 protected resource metadata for externally-governed resources (947d8c1)
• mcp/oauth2: TokenInfo.Actor (RFC 8693 delegation chain) and TokenInfo.Claims (raw external claims); GetActorFromContext reads the chain from a request (947d8c1)
• mcp/server: HTTPServerOptions.ExternalAuth (ExternalAuthOptions) runs ServeHTTP as a pure resource server, mutually exclusive with OAuth/OAuth2 (0d16c82)

Documentation

• Document external resource-server mode in the OAuth 2.1 and MCP server guides; add v0.12.0 release notes

Tests

• Cover the external token verifier, bearer middleware, protected resource metadata handler, and ServeHTTP ExternalAuth wiring (including mutual-exclusion and required-field validation) (8d8a849)

[v0.11.0] - 2026-08-02

Highlights

• New mcp/bridge/ package mounts remote MCP servers as local skills in the registry
• New migration/ package with adapters and a Check() validator for moving bespoke tool layers onto omniskill
• New roles/ package with reference role implementations (CodeReviewer, MeetingPM)
• Capability-based skill discovery in registry/ (FindByCapability, FindByKeyword, FindByCategory)
• role.Role and skill.Skill interfaces gain a Version() method as part of pre-1.0 interface stabilization

Breaking

• role.Role interface adds Version() string; custom Role implementations that don't embed role.BaseRole must add this method (e39af03)
• skill.Skill interface adds Version() string; custom Skill implementations that don't embed skill.BaseSkill must add this method (6fb561e)

Upgrade Guide

• If you implement role.Role or skill.Skill directly (without embedding role.BaseRole/skill.BaseSkill), add a Version() string method to your type
• Skills wanting capability-based discovery should implement registry.CapabilityProvider and/or registry.KeywordProvider, or call DiscoveryRegistry.RegisterCapabilities

Added

• mcp/bridge: Bridge.ToSkill() mounts a remote MCP session as a local skill.Skill, proxying tool calls through the session (1a077b7)
• migration: AdaptTool/AdaptSkill wrap legacy tool/skill types to implement skill.Tool/skill.Skill (e4e1230)
• migration: Check() validates registry migration completeness and reports actionable issues (e4e1230)
• registry: Capability type with standard constants (file, http, code, git, database, communication, search, etc.) and CapabilityProvider/KeywordProvider interfaces (521e105)
• registry: DiscoveryRegistry interface with FindByCapability, FindByCapabilities, FindByAnyCapability, FindByKeyword, FindByCategory, RegisterCapabilities (521e105)

... (truncated)

Commits

• ad5a3d2 docs: add v0.12.0 changelog entry and regenerate CHANGELOG.md
• cbbb475 docs(mcp): document external resource-server auth mode
• 2689c15 docs: add v0.12.0 release notes and update mkdocs nav
• 8d8a849 test: add external resource-server auth tests
• 0d16c82 feat(mcp/server): wire external resource-server auth into ServeHTTP
• 947d8c1 feat(oauth2): add external token verifier and resource metadata
• e118204 docs: update package lists and fix stale GitHub/role-interface references
• 4ca3455 docs: add v0.11.0 release notes and update mkdocs nav
• 9827500 docs(mcp): document v0.11.0 rate limiting, tool auth, logging, and token revo...
• 089fd24 docs: document v0.11.0 capability discovery, version pinning, and pack tooling
• Additional commits viewable in compare view