v2.6.2

TradeTally v2.6.2

Included changes

• Remediated backend dependency vulnerabilities identified during Snyk review by removing vulnerable runtime paths and refreshing the dependency graph.
• Replaced runtime Swagger spec generation with a checked-in generated OpenAPI spec artifact to eliminate the vulnerable swagger-jsdoc dependency while keeping /api-docs working.
• Removed the unused autocannon dependency from the backend dependency set.
• Hardened background schedulers and queue workers so long-lived timers do not block clean shutdown, and removed Jest forceExit now that test teardown is clean.
• Bumped backend and frontend versions to 2.6.2 for release detection.
• Hardened the marketing unsubscribe flow and added registration copy clarifying marketing email deliverability behavior.
• Added unsubscribe-related backend test coverage for controller, service, scheduler, and email behavior.
• Included the continuous futures migration repair already present in the patch release range.

Verification

• snyk test --all-projects reports no vulnerable paths.
• Backend Jest suite passes on 2.6.2.