Release v1.6.0 · xraph/authsome

Changes

build(deps): hold forge at v1.9.2 — v1.9.5 breaks OpenAPI generation (3bd64e9)
build(deps): bump forge to v1.9.5 (8fee160)
style: drop the block-level nolint made redundant by the per-line ones (8da0fef)
fix(api): pad EC coordinates to the curve's field size in JWKS (59edfc1)
build(deps): bump to the released forge stack and migrate CI (03f6cbc)
Merge pull request #39 from xraph/security-hardening-and-store-conformance (fb1d3af)
ci: update conformance-scoping comment now that postgres env_id is fixed (4cb1e35)
test(store): seed env for postgres env_id FK + fix passkey noctx lint (675d305)
ci: make the Postgres/Mongo store conformance job blocking (d4d4d18)
fix(store/mongo): query revoked refresh tokens by token_hash, not _id (7783453)
fix(lint,ci): resolve golangci-lint findings and scope the store integration job (f60a146)
chore(deps): patch ui Dependabot alerts via pnpm overrides (507898a)
chore(deps): patch docs Dependabot alerts (next 16.2.6, path-to-regexp, picomatch) (c0eba91)
chore(deps): bump golang.org/x/crypto to 0.54.0 and quic-go to 0.59.1 (9bcbb22)
security: harden auth surface and add cross-backend store conformance suite (c3871e3)
fix(session): stop refresh_token_replayed alert storm (a68409e)
Merge pull request #38 from xraph/auth-fix (62ecb9f)
feat: add customizable title and description to SignInForm component; update password reset event handling and include app URL in notification data (d4f59ae)

Go:

go get github.com/xraph/authsome@v1.6.0

npm:

npm install @authsome/client@1.6.0
npm install @authsome/ui-react@1.6.0

Flutter:

dependencies:
  authsome_flutter: ^1.6.0

feat: add customizable title and description to SignInForm component; update password reset event handling and include app URL in notification data by @jaymesC in #38
security: harden auth surface and add cross-backend store conformance suite by @juicycleff in #39

Full Changelog: v1.5.7...v1.6.0