v1.2.2

[v1.2.2] - 2026-10-23

✨ New Features

• 021e7c3 - api: change user action endpoints from get to post by @0PandaDEV

🐛 Bug Fixes

• e01dcdf - import: scope import jobs to owning user by @0PandaDEV
• 3d51038 - auth: use standard exp claim in session token by @0PandaDEV
• a9a0f79 - auth: block github signup on password accounts by @0PandaDEV
• a1fd770 - auth: validate epilogue oauth callback state by @0PandaDEV
• cb15790 - security: harden admin key check and redact key prefixes by @0PandaDEV
• a103825 - security: block internal network targets in instance fetches by @0PandaDEV

🔧 Chores

• 12296dd - bump docker image tag to v1.2.2 by @0PandaDEV