Release v0.20.6

Changelog

Other

• 2e4298a: Add limits on resource usage by starlark functions and limit login attempts (@akclace)
• b996cdd: Added action tools use case doc (@akclace)
• 63bb857: Change litestream log level to WARN by default (@akclace)
• 2eb837a: Fix SAML key file check and add browser based tests (@akclace)
• 711c68a: Fix build during tests (@akclace)
• abe6ee1: Fix logging calls to write to file (@akclace)
• 6aa1456: Fix oidc checks (@akclace)
• ca76cc5: Fix resource cleanup issues (@akclace)
• 91040e1: Fix test case (@akclace)
• 6f47a6b: Get lock for postgres before metadata upgrade (@akclace)
• 822160c: Hardening for the auth code (@akclace)
• c42b0fb: Log errors during CI (@akclace)
• fb72572: Move builtin users from dynamic config to metadata table (@akclace)
• e4011c4: Oauth flow related fixes (@akclace)
• 20fed12: Pin SDK modules to v0.20.6 for release (@akclace)
• ec787c7: Require admin:manage perm to change admin related RBAC (@akclace)
• a15196e: Restrict domains where the oauth AS login page is served from (@akclace)
• 176347f: Restrict mkcert certs to local dev domains (@akclace)
• 3bddf31: Split quick start into three pages (@akclace)
• 89592eb: Update changelog version (@akclace)
• 7da7339: Update dependencies (@akclace)
• 1578bda: Update doc page layout (@akclace)
• 952bf04: Upgrade certmagic and improve locking for cert renewal (@akclace)
• 21cb553: Upgrade golang.org/x/net version (@akclace)