Release v3.8.22

What's Changed

• perf: cache the provider list on the verify path by @forgetso in #3435
• fix(docker): raise oo2 query row limit so dashboards stop dropping time ranges by @goastler in #3437
• Keep the provider Caddy admin API and metrics off the network by @goastler in #3339
• CI: run the Rust tests for the native crates by @goastler in #3346
• Common: cap how many validation errors are returned and logged by @goastler in #3354
• Tests: keep running untyped tests when TEST_TYPE is set by @goastler in #3356
• Datasets: make the file-system tests actually assert by @goastler in #3358
• Example server: stop logging the site secret by @goastler in #3360
• Redis client: hide the password in logs and stop crashing on setup errors by @goastler in #3369
• Caddy image: pin the base image and plugin versions by @goastler in #3379
• CI: stop branch names being run as shell code in the changesets workflow by @goastler in #3380
• CI: pin third-party GitHub Actions to commit SHAs by @goastler in #3381
• Provider: log a short summary of bad request bodies, not the whole body by @goastler in #3384
• fix(datasets-fs): drop unused @prosopo/workspace dependency by @goastler in #3441
• fix(docker): make the oo and caddy healthchecks work on oo1/oo2 by @goastler in #3438
• Refuse a second submission of a PoW challenge by @goastler in #3340
• Make authenticated session verify single-use under concurrent requests by @goastler in #3341
• Make server verification single-use under concurrent requests by @goastler in #3343
• Hold Web Bot Auth signatures to a replay window and bound the key directory fetch by @goastler in #3344
• Let people solve image captchas with the keyboard by @goastler in #3345
• Provider: remove the unused session write queue by @goastler in #3347
• Server: time out provider requests after 10 seconds by @goastler in #3348
• Bundle: don't wipe the site's button label on remove() by @goastler in #3350
• Refuse a session issued for a different site key by @goastler in #3342
• Bundle: overlapping reset() calls no longer leave a stray widget by @goastler in #3351
• Captcha severity: treat keys like "constructor" as unknown captcha types by @goastler in #3353
• Bundle: fall back to English for an unsupported language by @goastler in #3352
• Provider: return real Merkle proofs for solved image captchas by @goastler in #3359
• Database: make session patches atomic by @goastler in #3357
• Only clear the captcha token in the widget's own form by @goastler in #3355
• Load balancer: time out the provider list fetch after 10 seconds by @goastler in #3363
• Locales: fix broken placeholders and Hindi text by @goastler in #3364
• Demos: fix explicit-render demo pages that never showed a widget by @goastler in #3361
• JA4: turn a parser panic into a normal error instead of killing the provider by @goastler in #3366
• Provider: drop bad DNS events one by one instead of the whole batch by @goastler in #3367
• Provider: stop a stale block verdict coming back after the cache is cleared by @goastler in #3368
• Types: cap the size of arrays in captcha requests by @goastler in #3371
• Server: reject tokens dated in the future by @goastler in #3370
• Util: stop merge() polluting Object.prototype by @goastler in #3373
• chore(changeset): drop the caddy-docker changeset that blocks releases by @forgetso in #3443
• Send provider database traffic over the tailnet, not the public internet by @forgetso in #3445
• Release v3.8.22 by @prosoponator-app[bot] in #3444

Full Changelog: v3.8.21...v3.8.22