Release v16.37.1
Summary
Bundles four Chronicle reliability fixes into one patch release. The Data Protection correction moves authentication key storage from the unintended node-local fallback to Chronicle's shared storage.
Fixed
- Prevented
[Passive]read models with fluent projections from registering empty duplicate model-bound projections. (#3757) - Added post-push Docker Hub verification for every Chronicle image variant so incomplete releases fail visibly. (#3770)
- Prevented root-level join events from applying blind MongoDB updates to unrelated read-model documents. (#3784)
- Configured ASP.NET Data Protection and certificate-rotation diagnostics to use the same shared grain-backed key repository. Upgrading invalidates existing authentication cookies and outstanding Identity/OpenIddict tokens once; users and clients must sign in again, while durable Chronicle secrets remain unaffected. (#3803)