v0.9.2

Security

• DNS rebinding past the SSRF guard. A destination URL was checked when
  it was resolved, but the HTTP client resolved it again on its own, so a
  record with a zero TTL could pass the check and then connect to a private
  address. The client now drops private and reserved addresses itself, at
  connect time.
• /api/v1/public/execution-ledger (unauthenticated) ran a 24-hour count
  on every request. It is now computed at most once a minute.

Fixed

• A resource_id lock is released when the call finishes. It used to be
  held for its full 15 seconds, so a follow-up action on the same resource
  got a 409. It is still held until it expires when the upstream's outcome
  is unknown (a timeout after sending).

No migrations.

Image: ghcr.io/sumedhchatse/agentraas:0.9.2. Full history: CHANGELOG.md.