v0.8.7

What's Changed

• security: remediate 30 findings from full security audit (1 Critical, 4 High, 11 Medium) by @ersinkoc in #19
• security: bind admin PIN into the WebSocket ticket (VULN-029) by @ersinkoc in #20
• security: pin CI tools + add Dependabot (INFO-7) by @ersinkoc in #21
• security: enforce role permissions on domain writes (VULN-021) by @ersinkoc in #24
• security: scope login lockout to (username, IP) (VULN-026) by @ersinkoc in #25
• docs(security): document opt-in global rate limit (INFO-3) by @ersinkoc in #26
• fix: data race on config reload via altSvcHeader by @ersinkoc in #27
• chore(deps): bump actions/checkout from 6 to 7 in the actions group by @dependabot[bot] in #22
• chore(deps): bump the go-deps group with 4 updates by @dependabot[bot] in #23

New Contributors

• @dependabot[bot] made their first contribution in #22

Full Changelog: v0.8.6...v0.8.7