Bug Fixes

• gateway: apply provisioning events only from their real publishers (42f7ca8)
• gateway: refuse other services' provisioning events; accept unsigned ones until required (16be57d)
• ci: promote the image built from the promoted commit (e687b02)
• ci: run the ocpp-core v16, v21 and mock-db tests, and test feature branches (5229a21)
• gateway: an unrecognised auth_status is Pending, not Approved (1ac2e1e)
• gateway: answer a CALL that cannot be claimed with a CALLERROR (02584dc)
• gateway: cap inbound WebSocket messages at 1 MiB, refuse larger with 1009 (81bd29f)
• gateway: key inbound CALL claims on a SHA-256 of the frame, not the frame (8628e65)
• gateway: make the WebSocket idle timeout fire, and ping quiet stations (cd9a1be)
• gateway: requeue provisioning events that fail transiently (ecba19d)
• gateway: run station-driven Argon2 on the blocking pool (d1cfe9f)
• gateway: trust ingress certificate headers only from a trusted proxy (0847723)
• ocpp-gateway: report a queued command that expired instead of sending it (bd087df)
• ocpp16: the Ended event carries the stop register, and the session energy beside it (f22417c)
• ocpp21: carry the station's reply on 2.1 command results (f1a1c75)
• ocppcore: carry TransactionEvent offline and seqNo into the platform event (41cc0ce)
• ocppcore: give every platform command an expiry; never dispatch an expired one (be701d7)
• ocppgateway: share the claim tests' connection instead of cloning it (265babb)
• ocppgateway: share the database connection so --all-features builds (f0a7123)
• readiness: carry configuredMaxAmps and every undeclared key through to the platform (f4777f5)

Features

• shared: carry the owning tenant on a PortalRequest (429e16a)