v2.1.50

Commits

• 8e8062e release: 2.1.50
• 4a43ef8 fix(T-9742): write the lock bump with uv 0.13.6 so only authlib and dnspython change (0.9.29 rewrote the revision and two marker lines)
• 98e95ff fix(T-9742): bump authlib 1.7.2 -> 1.9.1 and dnspython 2.8.0 -> 2.9.0 in the lock; the security audit finds 8 known vulnerabilities in them
• 5c0b676 docs(T-9479): name Linux as where a covered headless page misreports its height; drop an unmeasured headed-focus claim
• b87e5dd fix(T-9479): the settings exchange's tab opens behind the caller's page, so a named headless spawn keeps reporting its 600px window
• fd6d30e fix(T-9479): a named spawn no longer waits on the chrome://settings exchange: skipped when the pref is already on disk, run off the spawn path otherwise
• 3e0fcee fix(T-9477): a relaunch in the same second gets its own Chrome log instead of writing into the dead browser's
• e7fde98 fix(T-9464): a bug of ours behind a dynamic-hook tool propagates, not a {"success": False} dict
• ecb289e test(T-9468): the settle-deadline test drives a fake clock instead of fitting four probes into 0.3s of wall time
• a05c7b0 fix(T-9431): the hook validator and remove_hook let our own bugs propagate instead of reading them as a caller refusal