Release v0.11.2

[jonbaldie]

Summary

Patch release v0.11.2 with fixes for deeply nested JSON, malformed UTF-8 request bodies, numeric JSON validation cost, and rate-limit window calculations.

Included changes

• Return 400 for JSON nested beyond the parser's stack depth (Enqueue of deeply nested JSON returns 500 Internal Server Error instead of 400 #123, fix: return 400 for JSON nested beyond the parser's stack depth (#123) #128).
• Reject invalid UTF-8 enqueue bodies (Enqueue silently replaces invalid UTF-8 in JSON strings with U+FFFD and returns 200 #116, fix: reject invalid UTF-8 enqueue bodies (#116) #133).
• Avoid per-value JSON reviver overhead (fix: avoid per-value JSON reviver overhead (#124) #134).
• Make rate limiter checks independent of window size (Performance: RateLimiter.isAllowed is O(window) per request and collapses quadratically under sustained load; cost is paid before auth #125, fix: make rate limiter checks independent of window size (#125) #130).

Verification

• deno test --allow-read --allow-write --allow-net --allow-env --allow-run passed (338 passed, 0 failed).
• npm run quality:production passed.
• Compiled with Deno 2.7.6 and the CI permission set.
• Compiled binary smoke passed: health check, unauthenticated access rejection, and authenticated enqueue/dequeue round-trip.

Full Changelog: v0.11.1...v0.11.2