v5.3.0

What's Changed

• Refactor web search to unified configuration model by @manzke in #1281
• feat: iFinder/iAssistant JWT signing via iHub OIDC keypair by @manzke in #1283
• build(deps): bump protobufjs from 7.5.4 to 7.5.5 in /server in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1282
• build(deps): bump dompurify from 3.3.3 to 3.4.0 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1276
• build(deps-dev): bump prettier from 3.8.1 to 3.8.2 by @dependabot[bot] in #1248
• build(deps-dev): bump vitest from 4.1.2 to 4.1.4 by @dependabot[bot] in #1247
• Fix DOMPurify's ADD_TAGS function bypassing FORBID_TAGS by @claude in #1284
• fix(a11y): WCAG 2.1 Level AA keyboard navigation improvements by @manzke in #1228
• fix: graceful handling of VPN/network loss for internal deployments by @manzke in #1279
• Add missing translations for model configuration in admin by @claude in #1291
• feat(office): simplify Outlook add-in by reusing main chat infrastructure by @manzke in #1292
• Remove the separator in the + menu in chat by @claude in #1294
• build(deps-dev): bump prettier from 3.8.2 to 3.8.3 by @dependabot[bot] in #1285
• build(deps): bump axios from 1.15.0 to 1.15.1 by @dependabot[bot] in #1286
• build(deps-dev): bump globals from 17.4.0 to 17.5.0 by @dependabot[bot] in #1287
• build(deps-dev): bump @axe-core/playwright from 4.11.1 to 4.11.2 by @dependabot[bot] in #1288
• feat(office): configurable Outlook starter prompts with auto-fire by @manzke in #1300
• fix(oauth): apply client allow-list as filter for authorization_code flow (#1299) by @manzke in #1301
• Add documentation for the feedback feature by @claude in #1303
• Update README.md and merge with SUMMARY.md by @claude in #1305
• fix(office): eliminate spurious JWT audience warning for Outlook add-in tokens by @manzke in #1306
• Add functionality to override localizations via contents folder by @claude in #1309
• Add translations for missing voice modes by @claude in #1315
• Add feature flag to enable/disable export functionality per app by @claude in #1313
• fix(office): handle token expiration with silent refresh in Outlook add-in by @manzke in #1307
• Fix duplicate quick action icons in chat input toolbar by @claude in #1317
• fix(office): skip auth-gate transform for office add-in HTML pages by @manzke in #1320
• feat(server): sticky-session cluster, default 4 workers by @manzke in #1319
• Fix redirect issue after OIDC authentication in Outlook integration by @claude in #1322
• feat(office): add offline resilience to Outlook add-in by @manzke in #1323
• Revert "feat(office): add offline resilience to Outlook add-in" by @manzke in #1324
• Fix file upload not working with Outlook integration by @claude in #1326
• fix(office): land back on /api/oauth/authorize after OIDC on first auth by @manzke in #1331
• docs: add admin rollout guide for the Outlook add-in by @manzke in #1333
• Fix magic prompt broken by missing await on async convertResponseToGeneric by @manzke in #1330
• build(deps-dev): bump @xmldom/xmldom from 0.8.12 to 0.8.13 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1328
• fix: add missing await on async convertResponseToGeneric and processResponseBuffer by @manzke in #1332
• build(deps): bump @xmldom/xmldom from 0.8.12 to 0.8.13 in /client in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1329

Full Changelog: v5.2.13...v5.3.0