Fixes
- apply the default HTTP request timeout (af32783)
- calculate token lifetimes using elapsed time (e816bf0)
- isolate lazy client authentication handler caches (d687796)
- passport: handle rejected async verification callbacks (d730f80)
- preserve clock settings across DCR nonce retries (5433d68)
- release: separate changelog sections (57fcbc6)
- retain polling abort signals through response processing (b26170e)
- select a unique decryption key when kid is omitted (10ba026)
Refactor
- share grant polling lifecycle and retry handling (b931c40)