chore(main): release 0.3.0

[openbao-operator-release-pr]

🤖 I have created a release beep boop

0.3.0 (2026-06-01)

Features

• auth: default JWT flows to inline auth (#470) (445090a)
• observability: add workload metrics scraping support (#476) (d799277)
• openbaocluster: add audit file storage (#483) (f603869)
• openbaocluster: add ingress integration readiness (#409) (945b4a4)
• openbao: improve PKCS#11 runtime ergonomics (#400) (f32a6ec)
• perfcheck: harden v2 weekly performance harness (#487) (9552584)

Bug Fixes

• backup: record manual triggers and failure time (#407) (ff172c6)
• config: align audit device options with OpenBao (#423) (b1ed4a3)
• config: harden generated JWT roles (#420) (546c6db)
• config: use SemVer precedence for OpenBao version checks (#394) (173847d)
• deps: restore dependency update CI coverage (#399) (032e1b7)
• deps: update x/crypto for vulncheck (#468) (b7f48f1)
• deps: update x/net for vulncheck (#471) (8f3f554)
• gateway: emit TLSRoute as Gateway API v1 (#429) (05177d3)
• gateway: tolerate missing SupportedVersion condition (#486) (a695068)
• helm: deduplicate generated RBAC labels (#414) (78f8d73)
• openbao: guard metrics-only listener configuration (#481) (8da708b)
• openbao: share JWT token cache (#419) (a4a0887)
• provisioner: support external tenant PSS label ownership (#428) (08462c9)
• rbac: allow verification pull secret reads (#427) (10d40c0)
• rbac: permit managed ServiceMonitor reconciliation (#479) (693a43c)
• restore: harden restore job rendering (#405) (3e52f5a)
• restore: validate static token secret identity (#466) (0508606)
• security: harden backup and restore helper inputs (#474) (01ae81d)
• security: harden backup restore endpoint validation (#475) (98ef673)
• security: harden transit unseal credential handling (#473) (2e4e6c1)
• storage: enforce request-time endpoint guard (#477) (98f727d)
• storage: retry transient S3 bucket ensure failures (#408) (9796c2c)
• upgrade: harden rolling upgrade resume (#406) (33fe59d)
• workload: mount OCI plugin directory (#421) (fc95717)

---

This PR was generated with Release Please. See documentation.