v0.27.0

What's Changed

• fix: retain digest retry client through response body by @ryanfowler in #873
• chore(deps): bump psl from 2.1.218 to 2.1.219 by @dependabot[bot] in #872
• chore: update Rust to 1.97.1 by @ryanfowler in #874
• chore(deps): bump clap from 4.6.1 to 4.6.2 by @dependabot[bot] in #875
• Harden install.sh replacement with atomic staging by @ryanfowler in #876
• chore(deps): bump tokio from 1.52.3 to 1.53.0 by @dependabot[bot] in #877
• fix: preserve Happy Eyeballs resolver preference by @ryanfowler in #878
• fix: handle digest quoted strings correctly by @ryanfowler in #879
• fix: resolve ECH and address records concurrently by @ryanfowler in #880
• fix: avoid DNS stream transaction ID collisions by @ryanfowler in #881
• fix: bound external image adapter execution by @ryanfowler in #882
• Add HAR 1.2 sidecar recording for HTTP exchanges by @ryanfowler in #883
• docs: document HAR support in agent skill by @ryanfowler in #884
• chore(deps): bump serde_json from 1.0.150 to 1.0.151 by @dependabot[bot] in #890
• chore(deps): bump thiserror from 2.0.18 to 2.0.19 by @dependabot[bot] in #885
• chore(deps): bump futures-util from 0.3.32 to 0.3.33 by @dependabot[bot] in #886
• chore(deps): bump anyhow from 1.0.103 to 1.0.104 by @dependabot[bot] in #888
• chore(deps): bump webpki-roots from 1.0.8 to 1.0.9 by @dependabot[bot] in #889
• chore(deps): bump serde from 1.0.228 to 1.0.229 by @dependabot[bot] in #887
• chore(deps): bump tokio from 1.53.0 to 1.53.1 by @dependabot[bot] in #895
• chore(deps): bump clap from 4.6.2 to 4.6.3 by @dependabot[bot] in #894
• chore(deps): bump libc from 0.2.186 to 0.2.188 by @dependabot[bot] in #892
• chore(deps): bump tokio-util from 0.7.18 to 0.7.19 by @dependabot[bot] in #891
• docs: simplify CLI documentation language by @ryanfowler in #896
• chore(deps): bump hyper from 1.10.1 to 1.11.0 by @dependabot[bot] in #893
• fix: stabilize compressed SSE retry test by @ryanfowler in #897
• test: speed up integration suite by @ryanfowler in #898
• chore(deps): bump psl from 2.1.219 to 2.1.220 by @dependabot[bot] in #899
• chore(deps): bump clap from 4.6.3 to 4.6.4 by @dependabot[bot] in #901
• chore(deps): bump libc from 0.2.188 to 0.2.189 by @dependabot[bot] in #900
• chore(deps): bump base64 from 0.22.1 to 0.23.0 by @dependabot[bot] in #902
• chore(deps): bump psl from 2.1.220 to 2.1.221 by @dependabot[bot] in #903
• chore(deps): bump htmd from 0.5.4 to 0.5.5 by @dependabot[bot] in #905
• chore(deps): bump psl from 2.1.221 to 2.1.223 by @dependabot[bot] in #904
• Enforce timeout for system DNS resolution by @ryanfowler in #906
• chore(deps): bump rustls from 0.23.42 to 0.23.43 by @dependabot[bot] in #909
• chore(deps): bump async-compression from 0.4.42 to 0.4.43 by @dependabot[bot] in #908
• chore(deps): bump http from 1.4.2 to 1.5.0 by @dependabot[bot] in #907
• Simplify agent development guidance by @ryanfowler in #910
• chore(deps): bump taiki-e/install-action from 2 to 2.85.3 by @dependabot[bot] in #911
• fix: harden WebSocket handling by @ryanfowler in #912
• fix: do not record update timestamp during dry-run by @ryanfowler in #913
• chore(deps): bump legible to 0.4.3 by @ryanfowler in #914
• chore(deps): bump taiki-e/install-action from 2.85.3 to 2.85.5 by @dependabot[bot] in #915
• chore(deps): bump clap from 4.6.4 to 4.6.5 by @dependabot[bot] in #916
• chore(deps): bump taiki-e/install-action from 2.85.5 to 2.85.6 by @dependabot[bot] in #917
• fix: keep HTTP version flags for TLS inspection by @ryanfowler in #918
• fix: derive insecure TLS schemes from crypto provider by @ryanfowler in #919
• fix: avoid waiting for QUIC inspection cleanup by @ryanfowler in #920
• fix: report ECH DNS discovery failures by @ryanfowler in #921
• fix: apply CLI TLS settings to ECH DoH discovery by @ryanfowler in #922
• fix: report TLS cipher suite in inspection by @ryanfowler in #923
• fix: use platform verifier for TLS inspection by @ryanfowler in #924
• fix: mark OCSP inspection status unverified by @ryanfowler in #925
• fix: reject schemeless IPv6 loopback TLS URLs by @ryanfowler in #926
• fix: avoid guessing omitted TLS trust roots by @ryanfowler in #927
• fix: escape untrusted DNS inspection output by @ryanfowler in #928
• fix: use platform resolver for default DNS inspection by @ryanfowler in #931
• fix: skip malformed resolv.conf nameservers by @ryanfowler in #932
• fix: report partial DNS inspection failures by @ryanfowler in #933
• chore(deps): bump ipnet from 2.12.0 to 2.12.1 by @dependabot[bot] in #930
• fix: bound DNS RDATA decoding by @ryanfowler in #934
• fix: defer encrypted DNS bootstrap for IP inspection by @ryanfowler in #935
• fix: reuse DNS inspection connections by @ryanfowler in #936
• fix: preserve DoH TTL presence by @ryanfowler in #937
• fix: bound DoH error excerpts by @ryanfowler in #938
• chore(deps): bump taiki-e/install-action from 2.85.6 to 2.85.7 by @dependabot[bot] in #929
• feat: upgrade legible to 0.5.0 and remove htmd dependency by @ryanfowler in #939

Full Changelog: v0.26.0...v0.27.0