v0.60.0

0.60.0 (2026-10-27)

Features

• accounts: allow . _ @ + in account names, so a name can be the login's email (#847) (66c2c0b)
• auth: inbound JWT phase 2 workload identity (require, subject_prefix, identity_claim) (#854) (83ef44b)

Bug Fixes

• admin: redeem the OIDC callback state before spending the login budget (#838) (b3fe834)
• auth: keep refresh tokens and auth codes on their own host (#839) (a66b87c)
• deps: bump crates past published RustSec advisories (#835) (3dfdf1f)