Fixes
- Prevent HTTP 431 errors behind SSO reverse proxies by increasing the default request header read buffer to 16 KiB. Set
HTTP_READ_BUFFER_SIZEto customize the limit. - Update Go to 1.26.6, upgrade Fiber and supporting dependencies, and refresh the Alpine runtime to include security fixes.
Validation
- Go tests with the race detector passed on macOS and Linux/Alpine, including new HTTP header limit regression tests.
- JavaScript tests,
go vet, and dependency verification passed. - Container checks covered login, API operations, SQLite persistence after restart, and the healthcheck.