Features
- replace presigned URLs with HMAC-signed runner tokens (#67)
Bug Fixes
- set TLS 1.3 minimum version in provider client (#66)
- webhook structlog crash and binary cache version resolution (#65)
- update session expiry banner on sliding window refresh (#63)
- change default joinTokenKey to snake_case join_token (#61)
- remove per-pool service account override (#60)
- add passive_deletes to AgentPool relationships (#59)
Documentation
- clarify CLI plan-only behavior in remote execution mode (#64)
Full Changelog: v0.3.2...v0.4.0