v1.1.41

Changelog

• f80387d authn: cap system API request body reads
• 4f1fd2a authz: isolate token cache user state
• bb0b253 breakfix: restore Azure OAuth login with resource tokens
• 7f5d3d8 oauth: verify access token JWTs before merging claims
• 7b9002e redirects: require same rule for trusted redirect matches
• 95415a0 security: avoid session cache deletion under read lock
• 87d594b security: canonicalize authz request paths
• c320a62 security: harden authz bypass path matching
• 89beb23 security: harden profile API request parsing
• 65b492e security: prevent prefixed API key creation hang
• 429779c security: validate OAuth JWT issuer and audience claims
• 45cab9b skills: add threat hunt report TOC guidance
• d0224bf skills: add threat hunting workflow
• 47fe4cd skills: clarify forwarded IP threat hunt guidance
• f71eec3 skills: classify stdlib vulns as toolchain notes
• b2625d4 skills: expand threat hunting and sandbox test guidance