[madeyoga]

Summary

Prepare AuthEndpoints 4.0.3. External sign-in failures now always redirect to a local URL, the NuGet README is refreshed, and published packages include build provenance.

Release notes

• External sign-in failures now always redirect to a local URL. ErrorPath is used when it is a relative local path. Any other value falls back to /.
• The NuGet README is refreshed.
• Published packages include build provenance. Verify a downloaded package with gh attestation verify <file>.nupkg -R madeyoga/AuthEndpoints.

Packages: AuthEndpoints 4.0.3. AuthEndpoints.External.OAuth, AuthEndpoints.OAuth.GitHub, and AuthEndpoints.OAuth.Google stay at 4.0.1. No database migration.

Full notes: https://madeyoga.github.io/AuthEndpoints/versions/v4.0.3

Changes

• AuthEndpoints is 4.0.3, with NuGet release notes for the local external-failure redirect, the refreshed README, and build provenance.
• Changelog page v4.0.3 is the latest note. v4.0.2 no longer carries the latest badge.
• AuthEndpoints.External.OAuth, AuthEndpoints.OAuth.GitHub, and AuthEndpoints.OAuth.Google stay at 4.0.1. Their shipped code and README are unchanged since v4.0.2.
• Test lock files record AuthEndpoints 4.0.3 as the project-reference minimum.

Verification

• dotnet restore AuthEndpoints.sln --locked-mode succeeded.
• dotnet build AuthEndpoints.sln --no-restore succeeded with 0 warnings.
• dotnet test AuthEndpoints.sln --no-build: ShimSmoke 1 passed, External.OAuth.Tests 70 passed, AuthEndpoints.Tests 572 passed.
• pnpm generate prerendered 185 routes. The changelog lists v4.0.3 first, with the only Latest badge.
• dotnet pack produced AuthEndpoints.4.0.3.nupkg. AuthEndpoints.External.OAuth, AuthEndpoints.OAuth.GitHub, and AuthEndpoints.OAuth.Google remain 4.0.1.

Trace evidence

Skipped. This change sets the package version and release notes. It does not add a request path. The local external-failure redirect already shipped and is covered by the existing tests.