v0.16.5-beta.2

Beta prerelease. Bundles #17 and #18.

Fixed

• Signaling URL domain validation — the SocketUrl delivered in FCM push notifications was used directly to open the WebSocket signaling connection. A compromised or spoofed push could redirect the connection to an attacker-controlled signaling server, exposing OAuth and FCM tokens. Signaling URLs are now validated against *.fermax.io (covers all known Fermax environments); untrusted URLs are logged and replaced with the default signaling URL. Contributed by @aitoraznar (#18).
• FCM watchdog observability (#16) — follow-up to the reconnect-storm hardening in 0.16.4, no behavior changes to the restart state machine:
  • The "FCM listener is not running; restart scheduled" message is now logged at INFO instead of WARNING; WARNING is reserved for the restart actually firing.
  • ensure_running() catches all exceptions around the restart and logs them with traceback instead of letting them vanish into the watchdog's return_exceptions=True gather.
  • ensure_running() now returns the success of the start call, matching its documented contract.
  • The traceback rate-limit filter no longer consumes throttle budget on records with exc_info=(None, None, None).

Added

• Dependabot — weekly automated dependency update PRs for the Python dev toolchain and GitHub Actions (#18).