Scrumboy v3.22.5

What's Changed

• Audit/test suite by @markrai in #124
• oidc: tolerate trailing-slash issuer (Authentik) in discovery by @vicmike in #126
• ci: publish multi-arch (amd64 + arm64) images by @jordanfelle in #127
• Add SMTP email support for self-service password reset by @jordanfelle in #128
• Add OAuth 2.1 authorization server support for MCP clients by @jordanfelle in #130
• ci: build test images directly from pull requests by @markrai in #132
• Auth: explicit SSO linking, first password, and owner recovery (3.21.0) by @markrai in #134
• Mcp/spec normalization by @markrai in #135
• Security/dependency upgrades by @markrai in #136
• security docs + snyk badge by @markrai in #137
• Update Buy Me a Coffee username in FUNDING.yml by @markrai in #138
• Security/frontend toolchain updates by @markrai in #139
• build artifacts for v3.23.0 / PR #136 / dependency upgrade correction… by @markrai in #140
• ci: replace deprecated DCO actions by @markrai in #142
• Bring branch up to date with main by @markrai in #143
• small fix so that merges are not subject to dco by @markrai in #144
• chore: bring branch up to date with main by @markrai in #145
• chore: add dependabot config by @markrai in #141
• chore: dco skips check on dependabot opened branches by @tungstendev9 in #150
• initial osv-scanner workflow by @markrai in #151
• security: update Go dependencies for OSV findings by @markrai in #152
• patch version bump for v3.22.3 by @markrai in #153
• bring branch up to date with main by @markrai in #154
• Security/trivy by @markrai in #155
• security: pin workflow dependencies by @markrai in #156
• security: apply least-privilege workflow permissions by @markrai in #158
• Security/openssf by @markrai in #159
• ci(release): add signed provenance for Windows release artifacts by @markrai in #160
• ci(release): serialize Windows Go tests to avoid store timeouts by @markrai in #162
• Bump the npm-updates group in /internal/httpapi/web with 4 updates by @dependabot[bot] in #147
• bring branch up to date with main by @markrai in #163
• Bump the github-actions group across 1 directory with 7 updates by @dependabot[bot] in #157

New Contributors

• @vicmike made their first contribution in #126
• @jordanfelle made their first contribution in #127
• @dependabot[bot] made their first contribution in #147

Full Changelog: v3.18.23...v3.22.5