4.3.0-beta

Jellyfin 10.11 beta 4.3.0-beta (plugin version 4.3.0.29).
Install via the beta repository URL:
https://raw.githubusercontent.com/Flowfin/jellyfin-plugin-sso/manifest-beta/manifest.json

What's Changed

• Add a roles fuzz target and seed its repeated-key grammar [#1158] by @iderex in #1291
• Name the screened discovery refusal in Test connection [#1064] by @iderex in #1293
• Bound the provider-authored text in the discovery read's warning [#1194] by @iderex in #1294
• Refuse the roles when two copies of the role claim disagree [#1040] by @iderex in #1295
• Refuse a token whose JWS header marks an extension critical [#1038] by @iderex in #1296
• Pin that a repeated scalar aud collapses to the last occurrence [#1193] by @iderex in #1297
• Prove the non-parallel-collection rule can go red [#1173] by @iderex in #1298
• Fold the untrusted-JSON rule into the conformance home [#1037] by @iderex in #1299
• Retry the logout discovery read inside a stated budget [#1183] by @iderex in #1300
• Audit a refused role claim with its reason and never its value [#1149] by @iderex in #1301
• Rewrite the em dash out of the admin page and the translation surface by @iderex in #1302
• Pin the OIDC redirect_uri to one builder over one canonical base by @iderex in #1304
• Pin the OpenID validation basis to one file and one algorithm set by @iderex in #1305
• Name each logout_token refusal instead of collapsing eleven into one by @iderex in #1306
• Name the repeated member in the refusal entry, neutralised at the log call [#1195] by @iderex in #1307
• Build every OpenID client with its discovery metadata already set [#1067] by @iderex in #1308

Full Changelog: 4.3.0-beta.28...4.3.0-beta.29