v2.36.0

What's Changed

• chore: bump go to version 1.27.1 by @kasper-i in #892
• chore: migrate to new uuid package by @kasper-i in #898
• chore: migrate to json/v2 package by @kasper-i in #900
• chore: restore dependency security updates by @kasper-i in #890
• chore(deps): bump @awesome.me/webawesome from 3.11.0 to 3.12.0 in /web by @dependabot[bot] in #909
• chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 by @dependabot[bot] in #905
• fix: apply security headers to every response by @kasper-i in #888
• chore(deps): bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 by @dependabot[bot] in #901
• chore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.24 by @dependabot[bot] in #902
• chore: bump go dependencies by @kasper-i in #914
• chore: bump npm dependencies by @kasper-i in #913
• chore: prevent workflow script injection by @kasper-i in #891
• chore(deps): bump @types/node from 25.9.5 to 26.4.0 by @dependabot[bot] in #912
• fix(test): fix flaky test by @kasper-i in #915
• chore: sandbox the systemd service by @kasper-i in #896
• chore: use cognito as a public oauth client by @kasper-i in #889
• fix: bound http requests and event streams by @kasper-i in #917
• fix: fix flaky driver test by @kasper-i in #922
• fix(scorecard): add name retention options to failsafe version by @kasper-i in #899

Full Changelog: v2.35.0...v2.36.0