OAuth rate limiting is now per-project, per-IP, and configurable
— Rate limiting for OAuth token exchanges is scoped more granularly instead of being global, and can now be tuned via configuration. (#247)