[github-actions]

🤖 I have created a release beep boop

2.87.3 (2026-11-07)

Bug Fixes

• accept only provider-verified identities when pinning an OAuth2 account setup (1e9b6c1)
• close admin sign-in gaps around passkeys, SSO and the password check (a4c4409)
• do not retry an SMTP delivery that ran into the deadline, and report final failures as final (48d0983)
• e2e overlay flakes, and a confirmation OK that could read as declined (b3559b3)
• end change streams on revocation, remove exports with their account, refuse queue metadata as a job (53e7948)
• end IMAP proxy sessions on revocation and stop NIL arguments from crashing the proxy (6e2756e)
• find an account's exports through an index instead of a keyspace scan (2ab5ba1)
• keep one account's mail, webhooks and senders from monopolising the shared workers (381c4fd)
• record a confirmation's OK click before the dialog reports closing (c754c9f)
• refuse to start when a _FILE secret can not be read and stop disabling TLS checks on Heroku (71d4191)
• replace Microsoft 365 IMAP sessions before their access token expires (500e4d2)

---

This PR was generated with Release Please. See documentation.