3ngram 1.8.4

3ngram v1.8.4

Patch: ChatGPT can connect again, shipped on a re-scanned image.

v1.8.3 was not published. Its release scan failed on advisories published
after v1.8.2 (perl-base, libpcre2, proxy-addr, nodemailer). v* tags are
immutable, so that number is burned, and this release carries its content
together with the dependency fixes.

Changes

• CIMD clients that list none as supported now resolve as public PKCE
  clients (#248). ChatGPT's connector uses a Client ID Metadata Document
  (client_id=https://chatgpt.com/oauth/client.json) that prefers
  private_key_jwt and lists none as a fallback. The schema only accepted
  a declared none, so every ChatGPT authorization ended in a bare
  400 invalid_client. When a document carries
  token_endpoint_auth_methods_supported, that list is now authoritative and
  must include none; without it the declared method must be none or
  absent. The parsed client is always public, so /oauth/token and the
  oauth_clients row are unchanged. The live documents for ChatGPT,
  claude.ai and Claude Code are pinned as schema test fixtures.

• Release images clear the current scan (#251). Both images move to the
  current node:24-bookworm-slim digest (libpcre2 10.42-1+deb12u2) and
  upgrade perl-base to 5.36.0-7+deb12u4 from Debian security until the
  base image is rebuilt. proxy-addr is overridden to 2.0.8.

• nodemailer 9.1.1 → 10.0.12 (#251). Version 10 keeps the transport API,
  requires Node 20 or newer, and ships its own types.

Operations

No migration and no configuration change. Send one test email after the
server promote to confirm SMTP delivery on nodemailer 10.

Immutable container reference

ghcr.io/b3dmar/3ngram@sha256:9715bdded5ae8c626e5df895a3fc331d56b067ca52c7653196a71aa4ba35219d