Bug Fixes

• print: send device-api's print-service token with the serial label (ffe7d77)
• security: publish device credentials on device.credentials.upsert (e8e7a9f)
• setup: print the box card's portal address as http:// (5436b7c)
• catalog: the tethered PlugStream models have one connector (138b7b2)
• deps: move to sea-orm 2.0 and sqlx 0.9, which takes rsa out of the lockfile (81ff58a)
• setup: known-MAC credential re-fetch only inside a recovery window (4d6a661)
• test: build the tethered-connector migration test on sea-orm 2 (159a1b8)
• test: build the tethered-connector migration test on sea-orm 2 (e307581)
• deps: aws-sdk-s3 1.144 for lru 0.18 (e1307c9)
• deps: clear the October RustSec advisories (0680119)
• devices: keep a held charger's hardware on a model change, and publish the change (b2a4daa)
• devices: stop exposing claim codes and MACs to tenant reads and the device topic (38a58b9)
• hardening: CORS only for configured origins, and bounded image work off the runtime (2f1cc74)
• health: quiet the first broker connect, and make health checks able to fail (b8c9aae)
• idempotency: release a key its request abandoned, and never store a credential (418b267)
• outbound: bound every outbound call, cache organisation expansion, and warn on its fallback (bc9cbfb)
• outbox: enqueue with the write, confirm every publish, one ordered publisher, and prune (b394e6f)
• paging: serve device lists and sync pages in a total order, and page sync by position (a99d5f3)
• pending: trust only the gateway's requests, never their credential, and review as a platform admin (911a097)
• setup: normalise MACs, and bound the devices unauthenticated setup can create (722cfff)
• shutdown: drain requests and background work on SIGTERM (e2e718d)
• setup: serve the recovery-window route under /global/ and allow listed service callers (0c20713)

Features

• setup: print the adoption code on the box card (7fcdfa3)
• setup: mint a local access password and print it on a box card (221133b)
• setup: setup v2 - a signed challenge for chargers that hold a device key (985fed4)
• setup: open a recovery window by MAC for the factory and support (206b3c3)
• setup: open recovery windows from chargepoint-api's event (8e18a11)