- Changed: raise the shipped memory limits and watchdog interval

- Fixed: keep pinging the watchdog if a notify fails
- Fixed: don't let debug-mode memory dumps stall the event loop

- Changed: run saved-tests GC out-of-process via redbot_gc, not the d…

…aemon loop

- Maintenance release (no changelog entries)

- Added: Web Bot Auth support for outgoing requests

- Changed: derive the User-Agent URL from ui_uri

- Fixed: feed link parser from decoded content stream

- Fixed: cap HTML link parser input at 2 MB to avoid event-loop stalls
- Merge pull request #412 from mnot/claude/beautiful-varahamihira-28847b
- Changed: harden systemd unit and fix DynamicUser conflict

- Merge pull request #411 from mnot/claude/laughing-mccarthy-f0435f

- Fixed: validate user-supplied URI and request headers before testing

- Changed: use exchange.response_done(close=True) for 413

- Removed: unused imports across redbot package
- Changed: require thor 0.15.0
- Fixed: make LoadSavedTestHandler response_done idempotent
- Fixed: latch captcha verify callbacks to fire at most once
- Fixed: skip _continue_test if response already finalized
- Merge pull request #408 from mnot/fix/response-lifecycle-races
- Fixed: make WebUi response lifecycle idempotent

- Merge pull request #407 from mnot/claude/hopeful-ardinghelli-2b4b44

- Fixed: guard formatter_done against double response_done

- Merge pull request #406 from mnot/claude/objective-tesla-ed5ac4

- Fixed: suppress output after response_done to avoid OutputStateError

- Merge pull request #403 from mnot/fix/cap-request-body

- Fixed: send 413 and abort connection on first overflowing body chunk
- Merge pull request #405 from mnot/fix/bound-link-set
- Merge pull request #402 from mnot/fix/captcha-token-hardening
- Merge pull request #401 from mnot/fix/xss-form-title
- Merge pull request #404 from mnot/docs/remote-ip-header-trust
- Fixed: stop accumulating links once max_links is exceeded
- Changed: clarify trust requirement for remote_ip_header config
- Fixed: cap incoming request body size in standalone server
- Fixed: harden captcha human-token verification
- Fixed: escape title/css_class/link_uri in generated form and link HTML
- Merge pull request #400 from mnot/claude/nice-clarke-3cf049
- Changed: bump httplint and thor; adapt to new APIs