v0.5.8

Changes since v0.5.7

Features

• Support wildcard custom domains in gateway TXT resolution (#545)

Fixes

• Include SNI in gateway TLS passthrough error messages (#547)
• Allow wildcard fallback in non-compat mode (#545)
• Patch report_data in simulator RA-TLS certificates to bind to actual TLS key (#541)
• Set user-agent for KMS auth API requests and improve error logging (#525)
• Pin apt package versions in key-provider Dockerfile (#533)

Refactoring

• Extract TDX quote report_data offset as a named constant (#542)
• Extract generic http_get/http_post helpers in KMS (#525)
• Switch key-provider to upstream repo and update deps (#533)

Documentation

• Add self-host tutorial series (#540)
• Add encrypted environment variables technical spec (#506)
• Add security considerations for encrypted env authenticity (#506)
• Clarify normalized app_id input and runtime file path contract (#506)

Dependencies

• Update Rust dependencies for security fixes
• Bump quinn-proto, hono, fastify, minimatch, immutable, serialize-javascript, hardhat, fast-xml-parser