chore(v8): release 8.22.0

[github-actions]

🤖 I have created a release beep boop

8.22.0 (2026-09-16)

Features

• Adopt go-server-sdk v7.17.0 so an upstream 401 retries (#856) (e152af7)
• Back off big segment synchronization on a rejected SDK key (#857) (6ede85b)
• Classify transport failures as normal, including certificate failures (#873) (c3b6850)
• Keep retrying a rejected auto-configuration key (#866) (4bf3bb9)
• Report the auto-configuration stream's health in the status resource (#870) (5c1e3ee)

Bug Fixes

• autoconfig: refresh stored environment defaults on update (SEC-9484) (#842) (e04e3e2)
• deps: bump golang.org/x/crypto to v0.55.0 for CVE-2026-56854 (#848) (360d624)
• deps: bump golang.org/x/crypto to v0.56.0 for CVE-2026-78662 and CVE-2026-56855 (#854) (6d5d346)
• deps: bump supported Go versions to 1.27.0 and 1.26.7 (#837) (9b4fb46)
• deps: bump supported Go versions to 1.27.1 and 1.26.8 (#852) (4b06ed6)
• emit Vary: Origin on CORS responses (SEC-9501) (#844) (78a8f05)
• Report an incomplete DynamoDB auto-config cache write (#874) (0964dc0)
• security: redact all credential-bearing URL components in status dbServer (#846) (20effc5)
• streams: treat a nil replay result as no event instead of panicking (#845) (7d7eace)

---

This PR was generated with Release Please. See documentation.

---

Note

Overview
Release 8.22.0 — bumps the shipped version from 8.21.0 to 8.22.0 in .release-please-manifest.json, relay/version/version.go, and adds the 8.22.0 section to CHANGELOG.md.

The changelog records what ships in this tag (already merged elsewhere): retry/backoff for upstream 401s (go-server-sdk v7.17.0), rejected SDK keys during big-segment sync, and rejected auto-config keys; auto-config stream health in the status resource; transport failures (including cert errors) treated as normal; plus fixes for autoconfig environment defaults on update, CORS Vary: Origin, credential redaction in status dbServer, stream replay nil handling, incomplete DynamoDB autoconfig cache writes, dependency/CVE and Go version bumps.

No application logic changes appear in this diff—only release bookkeeping.

^{Reviewed by Cursor Bugbot for commit 088feba. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

🤖 Created releases:

• v8.22.0

🌻