v1.2.0

What's Changed

• ci: replace external Go Report Card service by @soulteary in #1
• [P1] Harden CI and release supply chain by @soulteary in #4
• [P1] Bound fixed-request load tests by duration by @soulteary in #5
• [P1] Enforce HTTP proxy hop-by-hop header rules by @soulteary in #3
• [P0] Harden proxy resource and access boundaries by @soulteary in #2
• fix(deps): update x/crypto for SSH DoS fixes by @soulteary in #6
• chore: drop Windows support by @soulteary in #7
• fix(config): validate forward multi-instance options by @soulteary in #9
• fix(forward): share idle timeout across tunnel by @soulteary in #10
• fix(proxy): harden SSH upstream lifecycle by @soulteary in #11
• fix(stats): keep connection events consistent by @soulteary in #13
• feat(loadtest): add bounded samples and CI output by @soulteary in #14
• fix(proxy): bound HTTP handshakes independently by @soulteary in #12
• fix(forward): reject self-referential targets by @soulteary in #8
• docs: prepare v1.2.0 release by @soulteary in #15

New Contributors

• @soulteary made their first contribution in #1

Full Changelog: v1.1.0...v1.2.0