Highlights
- Added forced-expiration support to secret requests. The request form now follows the server’s configured expiration policy and clearly displays the enforced lifetime.
- Hardened the DynamoDB backend with exclusive one-time secret claims, immediate expiration enforcement, strongly consistent reads, and atomic concurrent updates. DynamoDB users should make sure to apply this update.
- Improved log privacy by replacing secret identifiers with truncated hashes and removing sensitive URLs, query strings, and OIDC parameters from HTTP access logs.
- Added Danish and Brazilian Portuguese translations, alongside language-selection and translation coverage fixes.
- General code overhaul and improved test coverage.