Completion goes back to its 4.0.5 behavior. The visibility check added in 4.0.6 and reworked in 4.0.7 simulated list requests through middleware, and in 4.0.7 that could let a response cache serve hidden prompts to other clients. New tests pin both problems, and withholding suggestions for hidden references will return with a proper design. Resource template patterns are now cached without a size limit, so servers with thousands of templates read fast again, and OAuthProxy revokes the upstream refresh token instead of sending its own token upstream.
What's Changed
Security 🔒
- completions: revert the list-based visibility check (#5240, #5244) by @zzstoatzz in #5250
Fixes 🐞
- Fix OAuthProxy upstream refresh token revocation by @Ujemny in #5243
- resources: keep every compiled template pattern cached by @zzstoatzz in #5248
Docs 📚
- docs: add v4.0.8 changelog entries by @zzstoatzz in #5251
New Contributors
Full Changelog: v4.0.7...v4.0.8