v0.30.4

People now hear by email when the tries at their password run out. There is no migration in this release.

Security

• An email when the tries at a password run out. Whoever holds a copy of a session can use up the person's allowance, which keeps them from changing their password in settings for a while. They now get an email at the first refusal, saying what happened and what to do, at most once a day and only at an address they have verified. The refusal doesn't wait for it, and it is the same as before. (#250)

If you run your own

• Nothing to do for this release. With no email set up, nothing changes.
• The self-hosting guide now says where your database lives and how to choose. A D1 database stays where it was made, so this is worth reading before your first deploy. (#249)