- Add IP-based rate limiting to all auth POST endpoints to further reduce abuse surface like sign-up bombing (sign-ins were already limited).
- The ip-based nature means that, if you're using a reverse-proxy you should set the
X-Forwarded-Forheader. This was already true to get correct log entries.
- The ip-based nature means that, if you're using a reverse-proxy you should set the
- Do not instantiate parts of the WASM runtime when no WASM component is found. This reduces the memory footprint for instances that don't use WASM.
- Update SQLite from v3.50.2 -> v3.51.1 (i.e. rusqlite v0.38).
- Update Rust dependencies.
Full Changelog: v0.22.6...v0.22.7