v0.10.0

What's Changed

• Annotate protocol-mandated MD5 and bounded allocation as safe by @tas50 in #103
• ci: add xgrep security scan workflow by @tas50 in #104
• ci: bump the github-actions group across 1 directory with 10 updates by @dependabot[bot] in #108
• deps(deps): bump modernc.org/sqlite from 1.53.0 to 1.54.0 in the go-dependencies group by @dependabot[bot] in #106
• fix(security): close authorization gaps and authorize cookbook file transfers by @tas50 in #109
• perf: flatten fleet-scale check-in cost by @tas50 in #110
• perf: index search and make fleet bootstrap linear by @tas50 in #111
• feat: report real metrics from /_stats by @tas50 in #112
• test: close conformance gaps and add differential testing against a real Chef server by @tas50 in #113
• fix: idempotent Close, fail-closed authorization, wider differential coverage by @tas50 in #114
• ci(differential): fix the workflow's setup, and record the reference-routing blocker by @tas50 in #115
• ci(differential): use Cinc Server's own paths, and get the comparison actually running by @tas50 in #116
• ci: bump the github-actions group with 2 updates by @dependabot[bot] in #119
• deps(deps): bump modernc.org/sqlite from 1.54.0 to 1.55.0 in the go-dependencies group by @dependabot[bot] in #118
• fix(api): return Chef's object envelopes on responses that carry them by @tas50 in #117

Full Changelog: v0.9.0...v0.10.0