v1.11.7

What's Changed

• ci: group the example dependency updates into one pull request by @Jaro-c in #247
• test: close the sweep across the remaining modules by @Jaro-c in #248
• release: v1.11.7 by @Jaro-c in #249

Full Changelog: v1.11.6...v1.11.7

v1.11.6

What's Changed

• test(keymanager): make the size-cap tests reach the size cap by @Jaro-c in #228
• test(oauth): exercise the guards that survived being deleted by @Jaro-c in #232
• test(jwt): exercise the verification guards that survived deletion by @Jaro-c in #233
• ci: assert that the scheduled audit and fuzz are still firing by @Jaro-c in #226
• test(password): make the PHC bound tests reach the bounds by @Jaro-c in #234
• ci: label the freshness pin with its release by @Jaro-c in #245
• release: v1.11.6 by @Jaro-c in #246

Full Changelog: v1.11.5...v1.11.6

v1.11.5

What's Changed

• fix(keymanager): tighten the key directory, never loosen it by @Jaro-c in #223
• feat(keymanager): record the on-disk key layout version by @Jaro-c in #221
• release: v1.11.5 by @Jaro-c in #224

Full Changelog: v1.11.4...v1.11.5

v1.11.4

What's Changed

• ci(deps): bump Glyndor/.github/.github/workflows/main-guard.yml from 1.6.0 to 1.10.1 by @dependabot[bot] in #203
• ci(deps): bump Glyndor/.github/.github/workflows/line-limit.yml from 1.6.0 to 1.10.1 by @dependabot[bot] in #201
• ci(deps): bump Glyndor/.github/.github/workflows/go-fuzz.yml from 1.6.0 to 1.10.1 by @dependabot[bot] in #202
• ci(deps): bump Glyndor/.github/.github/workflows/dco.yml from 1.6.0 to 1.10.1 by @dependabot[bot] in #204
• ci(deps): bump Glyndor/.github/.github/workflows/go-audit.yml from 1.6.0 to 1.10.1 by @dependabot[bot] in #206
• ci(deps): bump Glyndor/.github/.github/workflows/go-ci.yml from 1.6.0 to 1.10.1 by @dependabot[bot] in #208
• ci(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #207
• ci(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #205
• build(deps): bump github.com/gofiber/fiber/v3 from 3.3.0 to 3.4.0 in /examples/fiber by @dependabot[bot] in #200
• ci(examples): resolve the examples through a Go workspace by @Jaro-c in #214
• build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in #212
• fix(deps): require go 1.26.5 to close the crypto/tls ECH leak by @Jaro-c in #216
• release: v1.11.4 by @Jaro-c in #217

Full Changelog: v1.11.3...v1.11.4

v1.11.3

What's Changed

• docs: remove advertising-style content from the README by @Jaro-c in #192
• chore: relicense from Apache-2.0 to MIT by @Jaro-c in #195
• ci: keep the org reusable pins out of Dependabot's hands by @Jaro-c in #196
• ci: let Dependabot propose the org reusable bumps again by @Jaro-c in #198
• chore: bring develop to main by @Jaro-c in #199

Full Changelog: v1.11.2...v1.11.3

v1.11.2

What's Changed

• fix(examples): add x/sync to oauth example go.sum by @Jaro-c in #190
• release: v1.11.2 by @Jaro-c in #191

Full Changelog: v1.11.1...v1.11.2

v1.11.1

What's Changed

• fix(oauth): SSRF-safe redirects, JWKS burst-collapse, id_token cap by @Jaro-c in #187
• release: v1.11.1 by @Jaro-c in #188

Full Changelog: v1.11.0...v1.11.1

v1.11.0

What's Changed

• feat(oauth): IssuerValidator for multi-tenant ID tokens by @Jaro-c in #184
• release: v1.11.0 by @Jaro-c in #185

Full Changelog: v1.10.9...v1.11.0

v1.10.9

What's Changed

• docs: apply the Markdown review fixes (were dropped from #180) by @Jaro-c in #182
• release: v1.10.9 by @Jaro-c in #183

Full Changelog: v1.10.8...v1.10.9

v1.10.8

What's Changed

• docs: fix Markdown staleness/gaps + add apikey example by @Jaro-c in #180
• release: v1.10.7 by @Jaro-c in #181

Full Changelog: v1.10.7...v1.10.8