21.0.3

• feat: add useRefreshTokenLock to serialize refresh token renewal across tabs
  • PR
• feat: improve handling of silent renew race conditions
  • PR
• Make offline_access refresh-token warning configurable
  • PR
• Fix: don't send code_challenge in PAR flow when disablePkce is true
  • PR
• test: convert validation specs to await firstValueFrom
  • PR
• fix(public) : Export PopupResult to public
  • PR
• chore: sync package-lock.json with package.json
  • PR
• docs: fix typos, broken links, and invalid Docusaurus directive
  • PR
• ci: build docs only on push to main, not on PRs
  • PR
• fix(check-session): require exact origin match in postMessage handler
  • PR