v2.8.0

• Added: the CLI stops after --timeout seconds and shows what it collected
• Changed: Web Bot Auth requests send Signature-Agent as a Dictionary
• Changed: Web Bot Auth key handling is tidier and the key's "nbf" is opt-in
• Changed: Web Bot Auth configuration is validated when it is loaded
• Fixed: translate the count of problems, and refresh the translations
• Fixed: list the interim responses of a retried request once
• Fixed: follow the HTML encoding rules for a charset in the link parser
• Fixed: use the first of a repeated attribute in the link parser
• Fixed: container and packaging hygiene
• Fixed: a missing or unusable config file is a one-line error, not a traceback
• Fixed: saving a missing test is a 404, and the client error log can't carry control characters
• Fixed: a stale human-token cookie no longer blocks a freshly solved captcha
• Fixed: error responses are in the format the client asked for
• Fixed: HAR output for a failed fetch says it failed
• Fixed: the table view marks redirects and errors, and a check can be shown for a descend run
• Fixed: HTML output no longer escapes link labels twice or status text for the wrong context
• Fixed: the Web Bot Auth directory response is signed over its Content-Digest
• Fixed: link extraction survives chunk boundaries and invalid bytes
• Fixed: a server can no longer make REDbot keep an unbounded number of 1xx responses
• Fixed: the SSRF filter now denies NAT64 addresses
• Fixed: anchors no longer use up the max_links budget
• Fixed: the content negotiation check no longer misreports servers that always compress
• Fixed: the partial content check no longer misreports correct servers
• Fixed: a client that disconnects mid-test no longer leaves the test running
• Fixed: the runtime timeout stops the whole test when a check is requested
• Fixed: saved tests no longer contain the server configuration
• Fixed: HTML formatters no longer render another request's resource