From aba2aa2645d774340c97ec88aae14b85e154fa27 Mon Sep 17 00:00:00 2001
From: "ds-release-bot[bot]"
 <116609932+ds-release-bot[bot]@users.noreply.github.com>
Date: Tue, 6 Oct 2026 15:42:26 +0000
Subject: [PATCH] chore(main): release 1.3.0

---
 .release-please-manifest.json |  2 +-
 CHANGELOG.md                  | 26 ++++++++++++++++++++++++++
 helm/Chart.yaml               |  2 +-
 pyproject.toml                |  2 +-
 uv.lock                       |  2 +-
 5 files changed, 30 insertions(+), 4 deletions(-)

diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index c3f14639..96f1cd94 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "1.2.0"
+  ".": "1.3.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 22eab246..b598e86c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,31 @@
 # Changelog
 
+## [1.3.0](https://github.com/developmentseed/stac-auth-proxy/compare/v1.2.0...v1.3.0) (2026-10-06)
+
+
+### Features
+
+* add HTTPException handling in CQL2BuildFilter middleware ([#202](https://github.com/developmentseed/stac-auth-proxy/issues/202)) ([5aeee7c](https://github.com/developmentseed/stac-auth-proxy/commit/5aeee7c473f053485c7f33ad91b0590b7a8ea4a5))
+* **helm:** add servicemonitor support. ([#209](https://github.com/developmentseed/stac-auth-proxy/issues/209)) ([979ceda](https://github.com/developmentseed/stac-auth-proxy/commit/979ceda352a3e5611a41096b4b5cc9c4b07a68b5))
+
+
+### Bug Fixes
+
+* allow queryables endpoints for collections ([#204](https://github.com/developmentseed/stac-auth-proxy/issues/204)) ([8b3d3c9](https://github.com/developmentseed/stac-auth-proxy/commit/8b3d3c96eeaee4e2ed045f329e20a95738ce41ac))
+* allow text in json response for CQl2RewriteLinksFilterMiddleware ([#205](https://github.com/developmentseed/stac-auth-proxy/issues/205)) ([e55d85f](https://github.com/developmentseed/stac-auth-proxy/commit/e55d85ff99e9276e573c125844f6221595475cd7))
+* fetch existing record in-process for transaction validation ([#214](https://github.com/developmentseed/stac-auth-proxy/issues/214)) ([3ffdd1d](https://github.com/developmentseed/stac-auth-proxy/commit/3ffdd1dcbf904e5c819b8e04bd1b52556db89d20))
+* keep headers from HTTPException responses built by middleware ([#212](https://github.com/developmentseed/stac-auth-proxy/issues/212)) ([bd13264](https://github.com/developmentseed/stac-auth-proxy/commit/bd1326400db9e9f4f518e9866435a23cadb7602c))
+* key OPA filter cache on full request context, not just Authorization (GHSA-rm58-963w-252r) ([2a1c989](https://github.com/developmentseed/stac-auth-proxy/commit/2a1c9895da4a614c880f0ece791ab48077d9b23b))
+* normalize root_path_skip_prefixes in ProcessLinksMiddleware ([#199](https://github.com/developmentseed/stac-auth-proxy/issues/199)) ([1193600](https://github.com/developmentseed/stac-auth-proxy/commit/1193600f3bb6961493c64b56fe5b1ed73fe33944))
+* reject ambiguous request paths before path-based checks (GHSA-c42p-7w4w-p877) ([2a1c989](https://github.com/developmentseed/stac-auth-proxy/commit/2a1c9895da4a614c880f0ece791ab48077d9b23b))
+* update reverse_proxy.py to return correct status code for upstream request timeout ([#210](https://github.com/developmentseed/stac-auth-proxy/issues/210)) ([be008ba](https://github.com/developmentseed/stac-auth-proxy/commit/be008baadf593e24893d3d411f2f6426e9d60122))
+* URL-encode query string values when injecting CQL2 filter (GHSA-c2p2-r6vx-2qc8) ([2a1c989](https://github.com/developmentseed/stac-auth-proxy/commit/2a1c9895da4a614c880f0ece791ab48077d9b23b))
+
+
+### Documentation
+
+* add security policy ([#218](https://github.com/developmentseed/stac-auth-proxy/issues/218)) ([ed3a6d7](https://github.com/developmentseed/stac-auth-proxy/commit/ed3a6d75deb1324bd4c7f5112b3ff621d767ad4e))
+
 ## [1.2.0](https://github.com/developmentseed/stac-auth-proxy/compare/v1.1.1...v1.2.0) (2026-07-23)
 
 
diff --git a/helm/Chart.yaml b/helm/Chart.yaml
index 7e412fa6..d7a91f69 100644
--- a/helm/Chart.yaml
+++ b/helm/Chart.yaml
@@ -3,4 +3,4 @@ name: stac-auth-proxy
 description: A Helm chart for stac-auth-proxy
 type: application
 version: 1.3.0
-appVersion: 1.2.0
+appVersion: 1.3.0
diff --git a/pyproject.toml b/pyproject.toml
index c32a54c3..9e8f05bf 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -28,7 +28,7 @@ license = {file = "LICENSE"}
 name = "stac-auth-proxy"
 readme = "README.md"
 requires-python = ">=3.10"
-version = "1.2.0"
+version = "1.3.0"
 
 [project.optional-dependencies]
 docs = [
diff --git a/uv.lock b/uv.lock
index 60a9bdcc..589c2f77 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2112,7 +2112,7 @@ wheels = [
 
 [[package]]
 name = "stac-auth-proxy"
-version = "1.2.0"
+version = "1.3.0"
 source = { editable = "." }
 dependencies = [
     { name = "brotli" },