v0.5.0

Security

• Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup - CVE-2026-66883 / GHSA-w5r8-m75h-98fc - reported by @woylie
• CSRF protection through state parameter broken - CVE-2026-66884 / GHSA-fg66-w5gp-22cr - reported by @woylie

What's Changed

• Add manual mode for redirect by @LostKobrakai in #81
• Align CI Test Matrix with oidcc by @maennchen in #91
• allow igniter 0.8 by @woylie in #90
• pass additional options to create_redirect_url/2 by @woylie in #94
• add documentation about redirect mode by @woylie in #95

Dependency Updates

• Bump the github-actions group with 2 updates by @dependabot[bot] in #82
• Bump the elixir group with 2 updates by @dependabot[bot] in #83
• Bump the elixir group across 1 directory with 6 updates by @dependabot[bot] in #92
• Bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #88

New Contributors

• @woylie made their first contribution in #90

Full Changelog: v0.4.0...v0.5.0