v2.2.4

Patch release for the 2.2 line.

Microsoft Entra ID: automatic account creation works again. Since 2.2, creating an account on first sign-in has required the email_verified claim, which Entra ID never sends for organisational accounts, so every first sign-in through Entra was refused with 403 Automatic account creation requires a verified email address. Eneo now accepts Entra's optional xms_edov (email domain owner verified) claim in its place. Administrators add xms_edov under Token configuration → Add optional claim → ID in the app registration. The allowed-domain list and the tenant's provisioning setting still apply, and xms_edov only fills in when the token carries no email_verified at all. Fixes #1318. See the single-tenant and multi-tenant OIDC guides.

No database migration or configuration change is required.

What's Changed

• chore: add CODEOWNERS for core maintainers (v2.2) by @CCimen in #1290
• fix(auth): accept Entra ID's xms_edov claim for JIT account creation (backport v2.2) by @MaxEriksson2000 in #1320

Full Changelog: v2.2.3...v2.2.4